obscura Ransomware
Tracked since Sep 5, 2025
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Obscura is a ransomware strain observed in 2025, written in Go and specifically targeting Windows domain controllers via the SYSVOL/NETLOGON share, using Curve25519 + XChaCha20 encryption with double-extortion tactics and a 10-day payment deadline.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live