Crazyhunter
Crazyhunter is a ransomware group with a financial motive, tracked by Brandefense. It targets 5 sectors, including Technology and Manufacturing, in the United States and Taiwan. It uses 27 MITRE ATT&CK techniques.
- Techniques
- 27
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2025
- Last seen
- Jan 12, 2026
- Record updated
Who They Target.
Countries · 2
About Crazyhunter.
CrazyHunter is a Go-based ransomware group that emerged in early 2025, derived from the open-source Prince encryptor, exclusively targeting Taiwanese organizations in healthcare, education, and industrial sectors using BYOVD techniques and tools like SharpGPOAbuse for lateral movement.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.