HelloKitty
HelloKitty is a cybercrime syndicate with a financial motive, tracked by Brandefense.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About HelloKitty.
A ransomware group active since 2020, primarily targeting Windows systems. In July, a Linux variant was observed targeting VMware's ESXi hypervisor. Some threat actors associated with HelloKitty use email for communication, while others use the TOR network. The highest observed ransom demand from this group is $10 million.
Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.