Threat Intelligence / Actor / Payload (ransomware group)

Payload (ransomware group)

1 tracked threat(s) · Categories: RANSOMWARE

Also known as: Payload Ransomware, Payload Group, Babuk Derivative Operator

Tracked threats

Payload Ransomware — Babuk-Derivative ChaCha20 + Curve25519 ECDH Per-File Encryption Targeting Windows and ESXi — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence