Payloadbin Ransomware
Payloadbin Ransomware is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector in 3 countries, including Australia and Japan.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
Sectors · 1
Countries · 3
Labelsransomware
About Payloadbin Ransomware.
PayloadBin is a ransomware strain first identified in 2021, widely recognized by cybersecurity experts as a rebranding of the Babuk Locker ransomware. However, further analysis suggested it was used by Evil Corp, a notorious hacker group, in an effort to bypass U.S. sanctions, as their previous ransomware (WastedLocker) was flagged.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.