Activity timeline
Payload appears in 1 tracked threat between and .
Threat actorTracked since 2026-05
Payload
Also known as:Payload RansomwarePayload GroupBabuk Derivative Operator
As of 2026-05-30, Payload is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning ransomware. Also known as Payload Ransomware, Payload Group, Babuk Derivative Operator.
- Tracked threats
- 11 high
- First seen
- 2026-05-26
- Last seen
- 2026-05-26
- ATT&CK techniques
- —No mapped techniques yet
- Related CVEs
- 0None referenced