BYOD — Ransomware Profile

BYOD is a crew that Straight Arrow News described in October 2026 as a newly established ransomware gang, after the group published personal data on 3,615 Trump Mobile customers to its dark web leak site. Per that report, the file held names, email addresses, phone numbers, home addresses and order details, and several people listed in it confirmed their details were accurate. A BYOD representative told the outlet the group got in by infecting an employee of Florida-based Liberty Mobile with malware and still had access to a Trump Mobile backend dashboard, claims that remain the group's own account. The crew was first observed on its data-leak site in October 2026, when it listed at least five claimed victims in a single day, among them Royal Selangor in Malaysia and Franklin Empire.

Recent claimed victims

Decorolala - 500 Line Sample 2026-10-17
Decorolala 2026-10-13
Some semi-samples Of Liberty X TMO cause we got yappatrons on twitter 2026-10-08
TMobile 2026-10-07
Gate | Crypto Exchange 2026-10-07
Trump Mobile Wireless (Telecom) 2026-10-05
Eteam 2026-10-05
Franklin Empire 2026-10-05
Royal Selangor 2026-10-05
Standpointe / Trinite Solutions 2026-10-05

Read the full analysis on IntelFusions