[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqS_BwW0MFxn6lLY1pwjp1zPMdoPrwIh_VP5sqM4CFug":3},{"article":4,"iocs":38,"watch_terms":47},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"6b883b86-99d1-40e3-9952-d350e1d7edeb","‼️ New Ransomware Group: Krybit\n\nkrybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd[.]onion...","new-ransomware-group-krybit-krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje","‼️ New Ransomware Group: Krybit\n\nkrybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd[.]onion\n\nkrybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd[.]onion\n\nkrybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd[.]onion https:\u002F\u002Ft.co\u002FthbVig0Haf","A previously unknown ransomware group called Krybit has been identified operating with multiple Tor-based command and control domains. The group's infrastructure suggests active operations, though specific victims or campaign details are not yet publicly disclosed. This represents an emerging threat that security teams should monitor for potential targeting.","New ransomware group Krybit emerges with multiple Tor infrastructure.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2040181179991679267","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHFAqWVQXoAAi86R.png","2026-04-03T21:34:32+00:00","2026-04-03T22:00:16.259328+00:00",7,[18],{"name":19,"type":20},"Krybit","threat_actor","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":21,"icon":11,"name":23,"slug":24},"Ransomware","ransomware",[26,28,33],{"category":27},{"id":21,"icon":11,"name":23,"slug":24},{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[39,43,45],{"type":40,"value":41,"context":42},"domain","krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion","Krybit ransomware group Tor C2 domain",{"type":40,"value":44,"context":42},"krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion",{"type":40,"value":46,"context":42},"krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion",[]]