Skip to content
RansomwareFinancialAdvanced sophistication · Small team

Sekhmet

Sekhmet is a ransomware group with a financial motive, tracked by Brandefense. It targets the Technology, and Energy and Utilities sectors in the United States.

Techniques
0
Exploited CVEs
No CVE data
Last seen
Jan 31, 2022
Record updated

Who They Target.

Labelsransomware

About Sekhmet.

Sekhmet is a Ransomware group primarily motivated by financial-gain. The group mainly targets various sectors globally through ransomware-as-a-service operations and is assessed to operate with advanced sophistication. It is commonly associated with double-extortion tactics, RSA-2048 and ChaCha20 encryption, and leak site operations called 'leaks leaks leaks' and is known for code similarities with Maze and Egregor ransomware families, advanced obfuscation techniques, and avoiding Russian/CIS systems.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.