Search threats, CVEs… ⌘K
← Back to all threat actors

babuk2

Babuk Locker 2.0, also known as Bjorka or SkyWave, after failing to make any profit from selling public databases on forums, decided to impersonate Babuk Ransomware group. He launched a blog where he claimed multiple public breaches from BreachForums as ransomware attacks

How we source and review actor profiles
Motivation
ransomware
Last seen
2025-04-06
Sectors
government-defense, technology, healthcare, professional-services, manufacturing, financial-services, retail-e-commerce, energy-utilities, agriculture-and-food-production, transportation, other, education
Status
Dormant

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Claimed
Victim claimtecnologias.mspz2.gob.ec listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Last observed
Indicator4 indicators cataloged

Types: domain, ip, onion.

Claimed
Victim claimturkish defense military listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimSecret plans of Indian army listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimBangladesh Armed Forces (BangLadesh Army) listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimSaudi Arabian military and government internal center listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimHellenic Airforce listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimgangotreehomes.com (RealEstate) listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimkfar hatta medical center - Lebanon listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimIran gas service system listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimezbuy.sg (Singapore Shopping) listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimPolizia italia mail access listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimzalora.sg (Singapore Shopping) listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimaosense.com - AO Sense INC. listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimnavy-mil-bd listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimdrdo.gov.in listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimuniproof.com.br listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claim(UPDATE) - whitecapcanada.com listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimpln.co.id - PLN INDONESIA listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimmoh.gov.rw listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimiDRAC (Integrated Dell Remote Access Controller) management interface for Dell servers listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimbrune.com.br - Group MC (conglomerate) listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimicvc.co - Instituto Cardiovascular del Cesar listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimLa Futura listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimAtlantic Coast Consulting Inc listed by babuk2

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

The interactive view includes 101 dated events with category filters and paging.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

babuk2Canonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...