payload Ransomware
Monitorado desde 17/02/2026
0
vítimas registradas
0
nos últimos 30 dias
0
CVEs
—
Última atividade
Payload is a ransomware group that emerged in early 2026, using Babuk-derived source code targeting both Windows and ESXi systems with cross-platform double-extortion attacks against healthcare, energy, real estate, and agriculture sectors, claiming 12 victims across seven countries within hours of launching its leak site.
Vulnerabilidades citadas para este grupo
CVEs associadas ao grupo pelo ransomware.live. Fichas ainda não publicadas aparecem sem link.
Nenhuma CVE associada a este grupo nas fontes.
Táticas e técnicas (MITRE ATT&CK)
Execution
T1106 Native API Stealth
T1027 Obfuscated Files or InformationT1070.004 File DeletionT1480 Execution Guardrails Discovery
T1057 Process DiscoveryT1082 System Information DiscoveryT1083 File and Directory Discovery Impact
T1486 Data Encrypted for ImpactT1489 Service StopT1490 Inhibit System Recovery Defense Impairment
T1685 Disable or Modify Tools Vítimas divulgadas em sites de vazamento, segundo o ransomware.live. Não exibimos nomes de vítimas. · Ver no ransomware.live