Cry0
| Active | RaaS
Cry0 is a ransomware-as-a-service operation that recruits affiliates via underground forums, using a Rust-written payload with blockchain-based (Internet Computer Protocol) negotiation infrastructure to resist law enforcement takedowns and offering affiliates a 90/10 revenue split.
Victims
2
First Discovered
2026-07-06
victim
Last Discovered
2026-08-06
victim
Inactive Since
6
days
Avg Delay
98
days
Infostealer
0.0%
victims with domain
Countries
2
hit
Attack Velocity — Last 12 months
1 victim this month
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
cry0 blog | Yes | 2026-08-12T22:13:42 |
cryoblogedawivdcknyd4jsjxkrx3xrqqltxla6wwjjnzm3f3jaxjzqd.onion
|
|||
|
No | 2026-08-12T22:13:47 |
pwn3dky35tub4ktj5bolc72oezg6qc3jvmbogaiwwkimiqtbbokyhrid.onion
|
Target
Top 5 Activity Sectors
- Retail & E-Commerce 1
- Transportation 1
Top 5 Countries
-
United States
1
-
Italy
1
Heatmap
YARA Rules (1)
Indicators of Compromise (IoCs) (2)
IP Address
1
tox
1
Victims (2)
