RansomwareUnknown
Payloadbin
Payloadbin is a ransomware group, tracked by Brandefense. It targets organisations in 3 countries, including Australia and Japan.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
Countries · 3
About Payloadbin.
PayloadBIN is a ransomware strain deployed in 2021 by Evil Corp as a rebranding of their WastedLocker/Hades/Phoenix lineage, specifically designed to evade US Treasury OFAC sanctions by impersonating the unrelated Babuk gang's rebrand rather than operating as an independent group.
Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.