Sinobi
Sinobi is a ransomware group with a financial motive, tracked by Brandefense. It targets 15 sectors, including Government and Technology, in 24 countries, including the United States and the United Kingdom. It uses 19 MITRE ATT&CK techniques.
Also known as
- sinobi Team
- Techniques
- 19
- Exploited CVEs
- No CVE data
- First seen
- Jun 30, 2025
- Last seen
- Sep 30, 2025
- Record updated
Who They Target.
Sectors · 15
Countries · 24
About Sinobi.
Sinobi is a private vetted-affiliate RaaS group that emerged in mid-2025, believed to be a rebrand of the Lynx/INC ransomware lineage, claiming 176 victims by end of 2025 through double-extortion attacks primarily against mid-market US organizations via compromised SonicWall VPN credentials.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.