All ransomware groups
shadowbyt3$
21 tracked victims
·first seen 2026-02-17·last activity 2026-09-16Group profile
ShadowByt3$ is a ransomware-as-a-service group first observed in October 2025, using multi-method extortion and communicating via Telegram and Tox, with a very small confirmed victim list suggesting it remains in early-stage operation.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-09-16 |  HandyTrac Greystar AZ WARNINGnew.handytrac.com | Other | US |
| 2026-09-15 | HandyTrac (Greystar Litchfield Park, AZ)new.handytrac.com | Other | US |
| 2026-09-10 |  John Engel Teamjohnengelteam.realscout.com | Professional Services | US |
| 2026-09-07 |  Ben Leeds Propertiesbenleedsproperties.com | Other | GB |
| 2026-08-29 |  BayView Real Estatepm.livable.com | Retail & E-Commerce | US |
| 2026-08-28 | Bayview Real Estate WARNINGpm.livable.com | Retail & E-Commerce | US |
| 2026-08-25 |  Sinar Mas Agribusiness and Food Golden Agri-Resources)www.smart-tbk.com | Agriculture and Food Production | ID |
| 2026-08-25 |  A-Plus Software Limitedwww.a-plussoft.com | Technology | GB |
| 2026-08-25 |  Knottingham Trent Universityntu.ac.uk | Education | GB |
| 2026-06-16 |  TINYpulse NINTENDO BREACHnintendo.com | Technology | JP |
| 2026-06-12 | Nintendo CompanyNintendo.com | Technology | JP |
| 2026-06-03 | L Lead Company (Leadership Boulevard) | Professional Services | |
| 2026-06-02 | C Cropwise (Syngenta Group) | Agriculture and Food Production | CH |
| 2026-05-21 |  Hotelogix CompanyHotelogix.com | Hospitality | IN |
| 2026-04-01 |  StarBucks CompanyStarBucks.com | Hospitality | US |
| 2026-05-14 |  PowerCampuspowercampus.in | Education | IN |
| 2026-05-14 |  Stride Learningstridelearning.com | Education | US |
| 2026-05-14 |  Amplify Technologyamplifytechnology.co.uk | Technology | GB |
| 2026-05-14 |  University Of Georgiauga.edu | Education | US |
| 2026-05-14 | Hotelogixhotelogix.com | Hospitality | SG |
| 2026-02-17 | U UMSA | Education |