Threat Intelligence / Actor / Payload Ransomware Group

Payload Ransomware Group

Nation: Russia · 1 tracked threat(s) · Categories: RANSOMWARE

Also known as: Payload Group, Payload RaaS

Tracked threats

Payload Ransomware Targeting Windows and VMware ESXi with Babuk-Derived Curve25519/ChaCha20 Encryption — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence