Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Osiris
As of Oct 19, 2026, Osiris has listed 3 confirmed victims on its leak site since Dec 10, 2025, 0.0% of all victims tracked by Brandefense. Its most targeted country is India (33.3% of its victims) and its most targeted sector is Technology.
Osiris is a ransomware-as-a-service operation first observed in November 2025 that uses a Bring Your Own Vulnerable Driver (BYOVD) technique to disable endpoint detection tools before deploying hybrid ECC + AES-128-CTR encryption; Symantec researchers linked its operators to former INC ransomware affiliates.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 3
- Rank By Victims
- #304
- Last Leak-Site Post
- Jan 18, 2026
- Top Country
- India
- Top Sector
- Technology
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| December 2025 | 1 |
| January 2026 | 2 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| December 2025 | 1 |
| January 2026 | 2 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Osiris Victims.
Search all 3 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Mantra Softech Pvt mantratec.com | INIndia | Technology | Not stated | |
| American Vanguard americanvanguard.studio | USUnited States | Technology | Not stated | |
| The Araneta Group aranetacity.com | PHPhilippines | Unknown | Not stated |
Arsenal.
- KronosMalware
Who Osiris Targets.
Shares are of this group's confirmed victims.History.
First confirmed victim listed on its leak site
First seen in Brandefense data
Busiest month on record: 2 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.