Skip to content
RansomwareFinancial

Exitium

Exitium is a ransomware group with a financial motive, tracked by Brandefense. It targets the Manufacturing sector in Japan.

Techniques
0
Exploited CVEs
No CVE data
First seen
Mar 1, 2026
Last seen
Apr 1, 2026
Record updated

Who They Target.

Sectors · 1
Countries · 1

About Exitium.

Exitium is a data extortion group first observed in early 2026, operating a Tor-based double extortion site and targeting victims via bulk data exfiltration followed by public naming-and-shaming, with known victims including a Brazilian agro-industrial firm and a US county appraisal district.

Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.