Pay2key
Pay2Key is ransomware that has been used by the threat actor Fox Kitten. The group seems to operate since July 2020, targetting mainly Israeli companies. Pay2Key has a darknet leak site to public stolen and sensitive information of their victims. Some of their victims: Intel - Habana Labs, IAI - Israel Aerospace Industries, Portnox - Network Security Solutions.
Victims
7
First Victim
2020-12-13
(est. attack date)
Discovery Date
2020-12-13
Last Seen
2021-09-09
Inactive Since
4yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
N/A
victims with domain
Countries
1
hit
Uptime
0.0% avg (30d)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Pay2Key Leak Directory! | No | 2026-08-22T08:53:12 |
pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion
|
Target
Top 5 Activity Sectors
- Technology 4
- Professional Services 1
- Energy & Utilities 1
- Manufacturing 1
Top 5 Countries
-
Israel
1
Heatmap
YARA Rules (1)
Victims (7)
