Knight ransomware source code for sale after leak site shuts down
ID: 9af11044-4f54-5aaf-8cf2-7144f786bd40
STIX ID: report--9af11044-4f54-5aaf-8cf2-7144f786bd40
Feed Name: Bleeping Computer
Threat Score
The report describes an advertisement on a criminal forum offering the alleged Knight ransomware 3.0 source code for sale to a single buyer; it summarizes Knight’s capabilities (Windows/macOS/Linux/ESXi targeting, info-stealers, a lightweight affiliate encryptor), the version improvements, and contextual signals that the operation may be inactive (offline extortion portal, no recent forum activity).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.