talos_ioc
- Source-provided label
- Babuk - S0638
- Evidence class
- provider reported
- Confidence
- Not reported
- Observed
- Aug 22, 2023 04:00 UTC
- Retrieved
- Oct 08, 2026 05:42 UTC
Babuk - S0638
Name of ATT&CK software | [Babuk](https://attack.mitre.org/software/S0638) is a Ransomware-as-a-service (RaaS) malware that has been used since at least 2021. The operators of [Babuk](https://attack.mitre.org/software/S0638) employ a "Big Game Hunting" approach to targeting major enterprises and operate a leak site to post stolen data as part of their extortion scheme.(Citation: Sogeti CERT ESEC B
Reference details
- Primary displayed family label
- Babuk - S0638
- Source category
- Malware intelligence
- Source context
2023/05/ra-group-ransomware.json- First reported
- Aug 22, 2023 04:00 UTC
- Last reported
- Aug 22, 2023 04:00 UTC
- Catalog updated
- Oct 08, 2026 05:42 UTC
- Record ID
3da18083fc8eff2544aa256a7c6bed0caf1b96cbbfa3d9a65cf06049668701cb
Source family labels
Tags
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
Research references
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.