logo

Babuk Ransomware

ID: 32679c48-47c2-5784-8aaf-b8874d5762ab

STIX ID: report--32679c48-47c2-5784-8aaf-b8874d5762ab

Feed Name: McAfee Labs Blog

Threat Score
75/100

Date Published: 2021-02-24

Date Updated: 2026-04-28

Author: Alexandre Mundo

...
...

Babuk ransomware, discovered in 2021, is a Ransomware-as-a-Service campaign targeting enterprises across transportation, healthcare, plastics, electronics, and agriculture; the report details its TTPs (spearphishing, public-facing exploits, use of valid accounts), affiliate recruitment for pentest-skilled operators, similarities to Vasa Locker, an active data-leak site, indicators/YARA rules, MITRE ATT&CK mappings, and recommended defensive measures and detections.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.