Ransomware Group
Babuk2
Babuk Locker 2.0, also known as Bjorka or SkyWave, after failing to make any profit from selling public databases on forums, decided to impersonate Babuk Ransomware group. He launched a blog where he claimed multiple public breaches from BreachForums as ransomware attacks
Known victims180
Threat level
HIGH
Get an alert if one of your domains is named on a ransomware leak site.
Monitor your domainsFree account · up to 5 monitored targets
Known infrastructure
The following Tor hidden services have been associated with this group:
5g2e.l.time4vps.cloudBabuk - Leaks site212.24.99.211.Babuk - Leaks site
These sites are malicious. Open them only from an isolated environment.
Check if you’re affected
Look up your domain to see whether it appears on Babuk2’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request