Barracuda — Ransomware Profile
Barracuda is an emerging data-extortion crew, unrelated to the security vendor of the same name, whose Tor leak site was first observed listing victims in August 2026. The WatchGuard ransomware tracker, which also records the alias Cuda, traces activity to July 2026 and describes an extortion-and-brokerage model - data auctions, double extortion, doxxing and free leaks rather than encryption - with demands of roughly $30,000-$50,000 and a dark-web forum presence under the handle BRKD. By late August 2026 the site listed at least eight claimed victims across the US, South Korea, Brazil and China, spanning healthcare, manufacturing, professional services and technology. Notable listings include a 17.6-million-line database allegedly stolen from South Korea's Namyang Industrial, offered for sale per DeXpose, and 643 GB claimed from Kansas automation firm Micro-Comm, per GalaxyWarden.
IntelFusions coverage (1)
Recent claimed victims
Read the full analysis on IntelFusions