← Back to all threat actors

babuk

Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.

How we source and review actor profiles

Motivation

ransomware

Last seen

2021-07-27

Sectors

professional-services, retail-e-commerce, government-defense, healthcare, hospitality, transportation

Status

Dormant

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

2021-07-27Claimed

Victim claimBridgeMill Athletic Club listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-07-27Last observed

Indicator1 indicator cataloged

Types: onion.

2021-07-07Claimed

Victim claimspsr-law.com listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-07-06Claimed

Victim claimE.A. Gibson Shipbrokers listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-06-21Claimed

Victim claimArabian Computer Supplies co. listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-06-15Claimed

Victim claim4murs.com listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-04-01Claimed

Victim claimHouston Rockets NBA Team listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-04-01Claimed

Victim claimWashington DC Metropolitan Police Department listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2020-10-25Claimed

Victim claimSerco listed by babuk

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

babukCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...