Pay2key
Pay2key is a ransomware group with a financial motive, tracked by Brandefense. It targets 9 sectors, including Government and Technology, in 4 countries, including the United States and the United Arab Emirates. It uses 4 MITRE ATT&CK techniques.
- Techniques
- 4
- Exploited CVEs
- No CVE data
- First seen
- Jul 1, 2020
- Last seen
- Mar 26, 2026
- Record updated
Who They Target.
About Pay2key.
Pay2Key is ransomware that has been used by the threat actor Fox Kitten. The group seems to operate since July 2020, targetting mainly Israeli companies. Pay2Key has a darknet leak site to public stolen and sensitive information of their victims. Some of their victims: Intel - Habana Labs, IAI - Israel Aerospace Industries, Portnox - Network Security Solutions.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.