Kraken is a Russian-speaking ransomware group that emerged in February 2025, evolving from the remnants of the HelloKitty ransomware cartel. This financially motivated group employs a double extortion model and distinguishes itself through the unique characteristic of benchmarking victim systems to optimize encryption speed and efficiency before initiating an attack. Kraken has demonstrated cross-platform capabilities, deploying ransomware variants specifically designed for Windows, Linux, and VMware ESXi environments.
RansomLook pivots
Data, inteligencia y referencias externas para contrastar actividad ransomware del actor.
Construction of BuildingsFood ManufacturingOther Information ServicesSoftware PublishersHospitalsEnterprises & HoldingAccommodationAir TransportationManufacturingConstruction