PayoutsKing — Ransomware Profile

PayoutsKing is an active ransomware group observed through at least 2026 that has claimed attacks against a wide range of industries internationally, including Del Monte Foods and V. FRAAS, across the US, UK, Germany, and Ireland using standard double-extortion tactics. In June 2026, Zscaler ThreatLabz documented a new initial-access campaign it named Edgecution, run by an access broker linked to PayoutsKing, that paired Microsoft Teams IT-impersonation with a malicious Microsoft Edge browser extension capable of escaping the browser sandbox to hijack victim PCs.

Also tracked as

Payouts King

IntelFusions coverage (1)

Tools & malware

Recent claimed victims

Vendor research

Read the full analysis on IntelFusions