Ransomware Group
Babuk
Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.
Known victims8
Threat level
LOW
Get an alert if one of your domains is named on a ransomware leak site.
Monitor your domainsFree account · up to 5 monitored targets
Tactics, Techniques & Procedures (TTPs)
Exfiltration
- File[.]io
Known infrastructure
The following Tor hidden services have been associated with this group:
Babuk - Leaks site
These sites are malicious. Open them only from an isolated environment.
Check if you’re affected
Look up your domain to see whether it appears on Babuk’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request