🏹 babuk — Ransomware
Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.
Classification
Ransomware
Leak-site victims
8
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (8)
| Victim | Country | Published | Domain |
|---|---|---|---|
| BridgeMill Athletic Club | US | 2023-07-31T14:35:15.317866+00:00 | bridgemillathleticclub.com |
| spsr-law.com | 2023-07-31T14:36:14.325206+00:00 | spsr-law.com | |
| E.A. Gibson Shipbrokers | 2023-07-31T14:35:46.906569+00:00 | — | |
| Arabian Computer Supplies co. | 2023-07-31T14:36:41.042428+00:00 | — | |
| 4murs.com | FR | 2023-07-31T14:37:09.822907+00:00 | 4murs.com |
| Houston Rockets NBA Team | US | 2021-04-01T00:00:00+00:00 | — |
| Washington DC Metropolitan Police Department | US | 2021-04-01T00:00:00+00:00 | — |
| Serco | GB | 2020-10-25T00:00:00+00:00 | serco.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron