Payload
| Active
Payload is a ransomware group that emerged in early 2026, using Babuk-derived source code targeting both Windows and ESXi systems with cross-platform double-extortion attacks against healthcare, energy, real estate, and agriculture sectors, claiming 12 victims across seven countries within hours of launching its leak site.
Extension(s): .payload
Victims
43
First Discovered
2026-02-17
victim
Last Discovered
2026-05-13
victim
Inactive Since
5
days
Avg Delay
N/A
attack→claim
Infostealer
37.1%
victims with domain
Countries
26
hit
Attack Velocity — Last 12 months
-89% vs last month
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Payload | Leaks | Yes | 2026-05-18T16:16:35 | nginx |
payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion
|
||
|
Payload Rescue | Login | Yes | 2026-05-18T16:15:59 |
payloadynyvabjacbun4uwhmxc7yvdzorycslzmnleguxjn7glahsvqd.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 7
- Business Services 5
- Consumer Services 4
- Financial Services 4
- Energy 4
Top 5 Countries
-
Philippines
4
-
United States
4
-
Egypt
3
-
Canada
2
-
Austria
2
Heatmap
Ransom Notes (2)
TTPs Matrix (5)
| Execution | Stealth | Discovery | Impact | Defense Impairment |
|---|---|---|---|---|
| Native API | Obfuscated Files or Information | Process Discovery | Data Encrypted for Impact | Disable or Modify Tools |
| File Deletion | System Information Discovery | Service Stop | ||
| Execution Guardrails | File and Directory Discovery | Inhibit System Recovery |
YARA Rules (1)
Indicators of Compromise (IoCs) (3)
Hash SHA256
2
Mutex
1
Victims (43)
Gorey Community School is a co-educational, multi-denominational institution located in Gorey, Co. W…
These websites represent a synergistic group of Malaysian companies, such as AME Elite and TSK Syner…
PROM (Peakside Ros Outlet Management) is a joint venture established by the investment firm Peakside…
The Rural Municipality of Gimli is a local government district in the province of Manitoba, Canada. …
PSTBN Peroni Sosa Tellechea Burt & Narvaja is one of the largest and most prestigious law firms in P…
Meditron C.A. is a Venezuelan company founded in 1972, specializing in the marketing and after-sales…
B3-Bruck is an Austrian company specializing in IT services and network solutions. They provide host…
Caravaning City is a travel and lifestyle platform focused on caravanning and RV adventures. They pr…
JOH Investments Limited is an officially registered financial entity based in Kingston, Jamaica, hol…
Better House Development specializes in real estate projects, offering a wide range of properties in…
Al Sulaiti Law Firm is one of the largest law firms in Qatar, established in 2002, offering a wide r…
Franziskusschule Wilhelmshaven is a school located in Wilhelmshaven, a city in northern Germany on t…
Marino Food Products Pvt Ltd, based in Hyderabad, India, specializes in a wide range of healthy and …
Sunlight Air offers affordable flights to popular Philippine island destinations such as Cebu, Coron…
Established in 1979, Oriental Weavers is a manufacturer of textiles used to construct rugs, carpet, …
El Wastani Petroleum Company (WASCO) is an Egyptian oil and gas company focused on the exploration, …
United Finance Egypt is an Egyptian non-bank financial institution (NBFI) that provides financing se…
Tscherne Consulting Steuerberatung GmbH is an Austrian tax consulting firm based in Graz. The compan…
NKAR Travel House is a premier travel agency in Sri Lanka, offering a diverse range of carefully cur…
Q2 Artificial Lift Services is a leading company specializing in the sales, service, engineering, an…
A.A. Al Moosa Enterprises, also known as ARENCO Group, is a diversified conglomerate based in Dubai,…
Carlysle.net belongs to Carlysle Engineering, Inc., an engineering firm based in Boston. The company…
Vancompare.co.uk is a UK-based online comparison service that helps users find the best insurance de…
HOPPECKE Asia Pacific Pte Ltd is the regional headquarters of the HOPPECKE Batteries Group in Singap…
Trusted shipping and logistics partner in the Philippines offering container transport and vessel se…
Lucky Innovative Manufacturing Corporation is a company based in Lipa City, Batangas, Philippines, s…
Notaría 89 – Edomex, located in the State of Mexico, offers specialized legal services for various r…
Established in 2011, Royal Bahrain Hospital (RBH) is a leading healthcare facility in Bahrain, offer…
J.T. Pack of Foods Co., Ltd. is a Thai company that specializes in food packaging solutions for busi…
Grid Fine Finishes (GFF) is an Egyptian company based in Cairo that specializes in interior fit-out …
Alcoholes Finos Dominicanos, S.A. (AFD) is a Dominican company that produces food-grade alcohol and …
Easy Servizi is an Italian company that provides technical and operational services for utility netw…
Thai Solar Energy Public Company Limited (TSE) was established in 2008 based in Bangkok, Thailand. T…
United Limsun Corporation is a rapidly growing retail and distribution company that selects multifun…
Tyler Media is a comprehensive media company in Oklahoma, offering a variety of services that includ…
Río Grande is a municipality located in Puerto Rico, a U.S. territory in the Caribbean. It has its o…
Almacenes Distribuidores de la Frontera ha forjado una trayectoria sólida en el Estado de Chihuahua.…