Osiris — Ransomware Profile
Osiris is a ransomware-as-a-service operation first observed in November 2025 that uses a Bring Your Own Vulnerable Driver (BYOVD) technique to disable endpoint detection tools before deploying hybrid ECC + AES-128-CTR encryption; Symantec researchers linked its operators to former INC ransomware affiliates.Recent claimed victims
- Mantra Softech Pvt 2026-03-23
Vendor research
- Osiris: New Ransomware, Experienced Attackers? Symantec (Broadcom) Threat Hunter Team
- New Osiris Ransomware Variant Discovered, Uses BYOVD Technique to Disable Security Tools ThaiCERT (ETDA)