Skip to content
brandefense.io
Request A Demo
RansomwareFinancial

Kyber

Kyber is a ransomware group with a financial motive, tracked by Brandefense. It targets the Government, and Defense and Aerospace sectors in the United States.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Oct 8, 2025
Last seen
Jul 30, 2026
Record updated

Who They Target.

Sectors · 2
Countries · 1

About Kyber.

Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.