Cisco Talos published IOCs ↗
- Evidence class
- provider reported
- Source family label
- Kraken Ransomware
- Source confidence
- Not reported
- Observed
- 2025-11-13 10:59 UTC
- Retrieved
- 2026-10-08 06:18 UTC
Kraken Ransomware
Ransomware galaxy based on https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml | It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc… The hacker request
Reference details
- Primary displayed family label
- Kraken Ransomware
- Source context
2025/11/Kraken-ransomware-group.json- First reported
- 2025-11-13 10:59 UTC
- Last reported
- 2025-11-13 10:59 UTC
- Catalog updated
- 2026-10-08 06:18 UTC
Source family labels
Tags
Published indicators
Network addresses are displayed in defanged form.
No file hashes or network indicators were published in this record.