Ransomware Group intelligence

Krybit

Active

Track Krybit with 234 published victims and 6 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 234 Known published victims in this dataset
First discovered 2026-04-03 Earliest victim discovery date
Last discovered 2026-09-13 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country Mexico 20 victims
Known locations 6 Leak or negotiation infrastructure tracked

Overview

Krybit is tracked by Dark Eye as a ransomware group with 234 published victims.

Mexico is currently the most targeted country in this dataset.

6 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 6 5.4%
  • Pending 106 94.6%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (6)

    Label Type Availability Links
    Leak location 4 Onion service Up checked 5h ago krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion
    Leak location 6 Onion service Up checked 5h ago krybivdln3oc3twbin4budgznzq7dmcolldnsx455lspxxe23b56y5qd.onion
    Leak location 5 Onion service Up checked 5h ago krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion
    Leak location 1 Onion service Up checked 5h ago krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion
    Leak location 3 Onion service Down checked 5h ago krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion
    Leak location 2 Web location Down checked 5h ago krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.

    Top Activity Sectors (16)

    Victims (234)

    Search, filter and paginate the victim timeline for Krybit. Showing 1–100 of 234.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware www.kashkha.com id32798 View details India IT pending
    Ransomware www.tiflispalace.ge id32773 View details Georgia Hospitality / Food & Beverage / Tourism pending
    Ransomware www.tiflispalace.ge id32773 View details Georgia Hospitality / Food & Beverage / Tourism pending
    Ransomware www.tender.mx id32774 View details Mexico Services pending
    Ransomware www.tender.mx id32774 View details Mexico Services pending
    Ransomware capricornlogistics.com id32775 View details South Africa Transportation / Travel / Logistics pending
    Ransomware capricornlogistics.com id32775 View details South Africa Transportation / Travel / Logistics pending
    Ransomware www.ibnsinatrust.com id32776 View details United Arab Emirates Finance / Legal / Insurance pending
    Ransomware www.ibnsinatrust.com id32776 View details United Arab Emirates Finance / Legal / Insurance pending
    Ransomware lasultanahotels.com id32777 View details Morocco Hospitality / Food & Beverage / Tourism pending
    Ransomware lasultanahotels.com id32777 View details Morocco Hospitality / Food & Beverage / Tourism pending
    Ransomware eracm.fr id32778 View details France IT pending
    Ransomware eracm.fr id32778 View details France IT pending
    Ransomware pss.ht id32779 View details Haiti Other pending
    Ransomware pss.ht id32779 View details Haiti Other pending
    Ransomware www.metalware.ca id32780 View details Canada Manufacturing / Engineering pending
    Ransomware www.metalware.ca id32780 View details Canada Manufacturing / Engineering pending
    Ransomware intherpro.com id32781 View details United States IT pending
    Ransomware intherpro.com id32781 View details United States IT pending
    Ransomware meridian16.hr id32782 View details Croatia Services pending
    Ransomware meridian16.hr id32782 View details Croatia Services pending
    Ransomware www.eac-airports.com id32783 View details Kenya Transportation / Travel / Logistics pending
    Ransomware www.eac-airports.com id32783 View details Kenya Transportation / Travel / Logistics pending
    Ransomware swadeshicipl.com id32784 View details India Other pending
    Ransomware swadeshicipl.com id32784 View details India Other pending
    Ransomware ligacancerguate.org id32449 View details Guatemala Other pending
    Ransomware ligacancerguate.org id32449 View details Guatemala Other pending
    Ransomware seashellhospital.com id32388 View details India Healthcare / Pharma pending
    Ransomware seashellhospital.com id32388 View details India Healthcare / Pharma pending
    Ransomware uicc.org id32389 View details Switzerland Public Sector pending
    Ransomware uicc.org id32389 View details Switzerland Public Sector pending
    Ransomware tum.com.mx id32390 View details Mexico Retail / E-commerce pending
    Ransomware tum.com.mx id32390 View details Mexico Retail / E-commerce pending
    Ransomware www.alphaplantes.com id32391 View details France Agriculture / Food pending
    Ransomware www.alphaplantes.com id32391 View details France Agriculture / Food pending
    Ransomware www.alphaplantes.com id32391 View details Canada Agriculture / Food pending
    Ransomware reignwoodpark.com id32392 View details China Hospitality / Food & Beverage / Tourism pending
    Ransomware reignwoodpark.com id32392 View details China Hospitality / Food & Beverage / Tourism pending
    Ransomware orex.co.th id32376 View details Thailand IT leaked
    Ransomware orex.co.th id32376 View details Thailand IT leaked
    Ransomware amptc.net id32377 View details United States IT pending
    Ransomware amptc.net id32377 View details United States IT pending
    Ransomware dmt-group.com id32378 View details Germany IT pending
    Ransomware dmt-group.com id32378 View details Germany IT pending
    Ransomware jswlaw.bt id32379 View details Bhutan Finance / Legal / Insurance pending
    Ransomware jswlaw.bt id32379 View details Bhutan Finance / Legal / Insurance pending
    Ransomware vedantaainstitute.in id32380 View details India Education pending
    Ransomware vedantaainstitute.in id32380 View details India Education pending
    Ransomware meccahighfeed.blogspot.com id32381 View details Saudi Arabia Other pending
    Ransomware meccahighfeed.blogspot.com id32381 View details Saudi Arabia Other pending
    Ransomware transportesmontejo.com id32382 View details Mexico Transportation / Travel / Logistics pending
    Ransomware transportesmontejo.com id32382 View details Mexico Transportation / Travel / Logistics pending
    Ransomware southsign.in id32383 View details India IT pending
    Ransomware southsign.in id32383 View details India IT pending
    Ransomware hccd-construction.com id32384 View details United States Construction / Real Estate pending
    Ransomware hccd-construction.com id32384 View details United States Construction / Real Estate pending
    Ransomware finodayacapital.com id32149 View details United States Finance / Legal / Insurance pending
    Ransomware finodayacapital.com id32149 View details United States Finance / Legal / Insurance pending
    Ransomware cgcgabon.com id32150 View details Gabon Services pending
    Ransomware cgcgabon.com id32150 View details Gabon Services pending
    Ransomware karkinos.in id32151 View details India IT pending
    Ransomware karkinos.in id32151 View details India IT pending
    Ransomware ferretornillos.gt id32152 View details Guatemala IT pending
    Ransomware ferretornillos.gt id32152 View details Guatemala IT pending
    Ransomware www.sankovn.com id32153 View details Viet Nam IT pending
    Ransomware www.sankovn.com id32153 View details Viet Nam IT pending
    Ransomware www.neooftalmo.com.br id32159 View details Brazil Services pending
    Ransomware www.neooftalmo.com.br id32159 View details Brazil Services pending
    Ransomware lemonfarm.com id32160 View details United States Agriculture / Food pending
    Ransomware lemonfarm.com id32160 View details United States Agriculture / Food pending
    Ransomware wmiemporium.com id32161 View details United States Retail / E-commerce pending
    Ransomware wmiemporium.com id32161 View details United States Retail / E-commerce pending
    Ransomware mimafoods.net id32162 View details Brazil Agriculture / Food leaked
    Ransomware mimafoods.net id32162 View details Brazil Agriculture / Food leaked
    Ransomware sysconth.com id32163 View details Brazil IT pending
    Ransomware sysconth.com id32163 View details Brazil IT pending
    Ransomware jindallifescience.com id32164 View details India Healthcare / Pharma pending
    Ransomware jindallifescience.com id32164 View details India Healthcare / Pharma pending
    Ransomware vascara.com id32165 View details Brazil Retail / E-commerce pending
    Ransomware vascara.com id32165 View details Brazil Retail / E-commerce pending
    Ransomware resi.com id32062 View details Germany IT pending
    Ransomware resi.com id32062 View details Germany IT pending
    Ransomware sunsea.co.th id31883 View details Thailand pending
    Ransomware www.mestojilemnice.cz id31899 View details Czechia pending
    Ransomware automotoresrosedal.com.ar id31900 View details Argentina pending
    Ransomware sipresitalia.it id31901 View details Italy pending
    Ransomware www.hsi.info id31902 View details Hong Kong pending
    Ransomware hisstw.com id31582 View details Taiwan, Province of China IT leaked
    Ransomware hisstw.com id31582 View details Taiwan, Province of China IT leaked
    Ransomware labindia.com id31583 View details India Manufacturing / Engineering leaked
    Ransomware labindia.com id31583 View details India Manufacturing / Engineering leaked
    Ransomware lhyk.com.sg id31584 View details Singapore Other leaked
    Ransomware lhyk.com.sg id31584 View details Singapore Other leaked
    Ransomware www.kilpi-koskinen.fi id31560 View details Finland Construction / Real Estate pending
    Ransomware www.kilpi-koskinen.fi id31560 View details Finland Construction / Real Estate pending
    Ransomware www.apsanet.com.ar id31561 View details Argentina IT pending
    Ransomware www.apsanet.com.ar id31561 View details Argentina IT pending
    Ransomware studiotibaldi.it id31485 View details Italy IT pending
    Ransomware studiotibaldi.it id31485 View details Italy IT pending
    Ransomware reflet2000.fr id31393 View details France Retail / E-commerce pending