Osiris
| RaaS
Osiris is a ransomware-as-a-service operation first observed in November 2025 that uses a Bring Your Own Vulnerable Driver (BYOVD) technique to disable endpoint detection tools before deploying hybrid ECC + AES-128-CTR encryption; Symantec researchers linked its operators to former INC ransomware affiliates.
Victims
3
First Victim
2025-12-10
(est. attack date)
Discovery Date
2025-12-18
Last Seen
2026-03-23
Inactive Since
159
days
Avg Delay
36
days
Infostealer
66.7%
victims with domain
Countries
3
hit
Uptime
0.0% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Osiris | No | 2026-08-22T08:51:29 |
osirisbm3357xrccnid23nlyuqwzbgqheaei6dxvyi34tbkqr3bmvfid.onion
|
Target
Top 5 Activity Sectors
- Technology 1
- Manufacturing 1
- Hospitality 1
Top 5 Countries
-
India
1
-
United States
1
-
Philippines
1
Heatmap
YARA Rules (1)
Victims (3)
American Vanguard Corporation is a U.S.-based company specializing in agricultural chemicals, primar…
The Araneta Group is a private, diversified conglomerate in the Philippines — active in property dev…