Claimed
Victim claimL3HARRIS listed by kyber
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor Claimedkyber
Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Last observed
Indicator1 indicator cataloged
Types: onion.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
kyberCanonical Name
Loading CVEs, techniques, indicators, malware, victims, and activity...