Kazu
Kazu is a ransomware group with a financial motive, tracked by Brandefense. It targets 7 sectors, including Government and Technology, in 14 countries, including the United States and the United Kingdom. It uses 1 MITRE ATT&CK technique.
- Techniques
- 1
- Exploited CVEs
- No CVE data
- First seen
- Nov 11, 2025
- Last seen
- Sep 7, 2026
- Record updated
Who They Target.
How They Operate · MITRE ATT&CK.
1 techniques across 1 of 14 tacticsReconnaissance·
Resource Development1
Acquire Access
Initial Access·
Execution·
Persistence·
Privilege Escalation·
Defense Evasion·
Credential Access·
Discovery·
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Impact·
Arsenal · Malware And Tools.
- Kazumalware
About Kazu.
Kazu is an emerging ransomware group active since September 2025 that employs double-extortion tactics, targeting government, healthcare, and financial organizations primarily in Southeast Asia, the Middle East, and Latin America, with notable claimed breaches including Dubai's Ports, Customs and Free Zone Corporation with 1.94 TB exfiltrated.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.