Kyber — Ransomware Profile

Kyber is a recently identified ransomware group using sophisticated hybrid encryption (AES-256-CTR with X25519 and Kyber1024), operating Tor-based communication channels and employing double-extortion with free partial decryption offered to build negotiation trust, discovered through underground forum monitoring in 2025.

IntelFusions coverage (1)

Recent claimed victims

Vendor research

Read the full analysis on IntelFusions