Babuk
Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.
Victims
8
First Victim
2020-10-25
(est. attack date)
Discovery Date
2020-10-25
Last Seen
2023-07-31
Inactive Since
3yrs
more than
Avg Delay
757.8
days
Infostealer
50.0%
victims with domain
Countries
3
hit
Uptime
0.0% avg (30d)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Babuk - Leaks site | No | 2026-08-22T08:58:56 |
nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion
|
Target
Top 5 Activity Sectors
- Retail & E-Commerce 2
- Professional Services 2
- Transportation 1
- Hospitality 1
- Government & Defense 1
Top 5 Countries
-
United States
3
-
France
1
-
United Kingdom
1
Heatmap
Tools Used
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
|
File[.]io
|
Negotiation Chats (2)
YARA Rules (1)
Victims (8)
