Skip to content
RansomwareFinancialAdvanced sophistication · Small team

Krybit

Krybit is a ransomware group with a financial motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 35 countries, including India and France. It uses 24 MITRE ATT&CK techniques.

Also known as
  • krybit Team
Techniques
24
Exploited CVEs
No CVE data
First seen
Apr 3, 2026
Last seen
Sep 3, 2026
Record updated

Who They Target.

About Krybit.

Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.

Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.