Cry0
| Active | RaaS
Cry0 is a ransomware-as-a-service operation that recruits affiliates via underground forums, using a Rust-written payload with blockchain-based (Internet Computer Protocol) negotiation infrastructure to resist law enforcement takedowns and offering affiliates a 90/10 revenue split.
Victims
2
First Victim
2026-03-30
(est. attack date)
Discovery Date
2026-07-06
Last Seen
2026-08-06
Inactive Since
36
days
Avg Delay
98
days
Infostealer
0.0%
victims with domain
Countries
2
hit
Uptime
40.4% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
cry0 blog | No | 2026-09-11T20:37:58 |
cryoblogedawivdcknyd4jsjxkrx3xrqqltxla6wwjjnzm3f3jaxjzqd.onion
|
||||
|
No | 2026-09-11T20:36:50 |
pwn3dky35tub4ktj5bolc72oezg6qc3jvmbogaiwwkimiqtbbokyhrid.onion
|
Target
Top 5 Activity Sectors
- Retail & E-Commerce 1
- Transportation 1
Top 5 Countries
-
United States
1
-
Italy
1
Heatmap
YARA Rules (1)
Indicators of Compromise (IoCs) (2)
IP Address
1
Tox
1
Victims (2)
