Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Kazu

| Active

Kazu is an emerging ransomware group active since September 2025 that employs double-extortion tactics, targeting government, healthcare, and financial organizations primarily in Southeast Asia, the Middle East, and Latin America, with notable claimed breaches including Dubai's Ports, Customs and Free Zone Corporation with 1.94 TB exfiltrated.

Victims
19
 
First Victim
2025-11-06
(est. attack date)
Discovery Date
2025-11-11
 
Last Seen
2026-09-05
 
Inactive Since
1
day
Avg Delay
2.5
days
Infostealer
100.0%
victims with domain
Countries
12
hit
Uptime
95.7% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)
-89% vs last month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN Status
favicon Kazu Yes 2026-09-06T10:16:44 Apache Apache 2.4.65 (Debian) 6czlbd2jfiy6765fbnbnzuwuqocg57ebvp3tbm35kib425k4qnmiiiqd.onion

Target
Top 5 Activity Sectors
  • Healthcare 11
  • Professional Services 2
  • Government & Defense 2
  • Education 1
  • Technology 1
Top 5 Countries
  • US flag United States 5
  • BR flag Brazil 2
  • MX flag Mexico 2
  • CO flag Colombia 2
  • AR flag Argentina 1

Heatmap

YARA Rules (1)

Victims (19)
Logo
Discovered: 2026-09-05 (13h ago)
Spirit Cultural Exchange is a U.S.-based organization that provides international cultural exchange …
Logo
Discovered: 2026-08-23 (14d ago)
PappyJoe is an India-based healthcare technology company that provides a cloud-based practice manage…
Logo
Discovered: 2026-08-23 (14d ago)
Instituto Ferrero de Neurología y Sueño (IFN) is a specialized medical center in Argentina that focu…
Logo
Discovered: 2026-08-23 (14d ago)
Mobilemed is a Brazil-based health technology company that provides a cloud-based PACS (Picture Arch…
Logo
Discovered: 2026-08-23 (14d ago)
Yocale is a cloud-based business management platform that helps appointment-based businesses streaml…
Logo
Discovered: 2026-08-23 (14d ago)
PawlyClinic is a digital veterinary care platform that connects pet owners with licensed veterinaria…
Logo
Discovered: 2026-08-23 (14d ago)
Dr. Akbar Niazi Teaching Hospital (ANTH) is a 500-bed tertiary care teaching hospital located in Isl…
Logo
Discovered: 2026-08-23 (14d ago)
Centro Médico Especializado OSI is a healthcare provider based in Peru that specializes in physical …
Logo
Discovered: 2026-08-23 (14d ago)
Meducar is a Latin American healthtech platform that provides software for doctors and clinics to ma…
Logo
Discovered: 2026-08-23 (14d ago)
digital healthcare platform designed to help doctors, clinics, and medical professionals manage thei…
Logo
Discovered: 2026-01-26 (7mo ago)
zHealthEHR is a cloud-based electronic health record (EHR) and practice management platform built pr…
Logo
Discovered: 2026-01-12 (7mo ago)
MyVete is a veterinary software designed to help animal clinics and veterinary practices manage thei…
Logo
Discovered: 2025-12-30 (8mo ago)  ·  Attack est.: 2025-12-29
ManageMyHealth is a New Zealand-based online platform that enables individuals to conveniently manag…
Logo
Discovered: 2025-12-29 (8mo ago)
Saudi Icon specializes in design and build solutions, offering a holistic approach to construction a…
Logo
Discovered: 2025-12-11 (8mo ago)
Leadway Assurance Company Limited is the leading insurance provider in Nigeria, offering a comprehen…
Logo
Discovered: 2025-12-06 (9mo ago)
CT Dent Ltd is an independent CBCT imaging centre based in London, UK, specializing in dental CT sca…
Logo
Discovered: 2025-11-11 (9mo ago)  ·  Attack est.: 2025-11-10
The official portal of the Comisión Nacional del Servicio Civil (CNSC), Colombia’s National Civil Se…
Logo
Discovered: 2025-11-11 (9mo ago)  ·  Attack est.: 2025-11-08
The official online portal of the Defensoría del Pueblo de Colombia, a constitutional and autonomous…
Logo
Discovered: 2025-11-11 (9mo ago)  ·  Attack est.: 2025-11-06
Doctor Alliance (doctoralliance.com) is a U.S.-based healthcare technology platform that helps physi…