Reynolds
| RaaS
Reynolds is a ransomware family first identified in early 2026, notable for embedding BYOVD (Bring Your Own Vulnerable Driver) defense evasion by exploiting CVE-2025-68947 to terminate security software before encrypting files, initially attributed to Black Basta and considered attractive to RaaS affiliates.
Victims
1
First Victim
2025-11-13
(est. attack date)
Discovery Date
2026-02-11
Last Seen
2026-02-11
Inactive Since
187
days
Avg Delay
90
days
Infostealer
0.0%
victims with domain
Countries
1
hit
Uptime
0.0% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Reynolds | No | 2026-08-08T13:12:52 |
bs2tlg32pfjwmclm22cyngqmoo24cdlhfxzbruwrdaxumisfeory32qd.onion
|
Target
Top 5 Activity Sectors
- Professional Services 1
Top 5 Countries
-
United States
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (1)
tox
1
| Type | IOC |
|---|---|
tox
|
6F7831EBB5EEB933275BD6F4B4AA888918E9B7E40454A477CADDE7EE02461153D3B77AE50798
|
Victims (1)
Falcon Management Corp. was founded in 1991. The company's line of business includes providing finan…