Abyss
Abyss is a ransomware group with a financial motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 16 countries, including the United States and the United Kingdom. It uses 3 MITRE ATT&CK techniques.
Also known as
- Abyss Locker
- Abyss-data
- Infoleak222
- Techniques
- 3
- Exploited CVEs
- No CVE data
- First seen
- Mar 21, 2023
- Last seen
- Aug 26, 2026
- Record updated
Who They Target.
Sectors · 13
Countries · 16
Labelsglobalransomware
About Abyss.
Abyss (also known as Abyss Locker) is a ransomware operation first identified in March 2023, derived from the Babuk source code, that targets Windows and Linux/VMware ESXi systems using double-extortion tactics across healthcare, manufacturing, finance, and technology sectors, predominantly in North America.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.