Threat Intelligence / Actor / Payload Ransomware Group
Payload Ransomware Group
As of 2026-07-21, Payload Ransomware Group is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning ransomware. Also known as Payload Group, Payload RaaS.
Also known as: Payload Group, Payload RaaS
Tracked threats
Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →