Ransomware Turf War as 0APT and KryBit Groups Trade Blows

Halcyon reports that rival ransomware groups 0APT and KryBit engaged in reciprocal leak-and-hack activity: 0APT published KryBit’s operator/admin panel, affiliate and victim negotiation data (20 potential victims, 10–250GB exfiltrated, ransoms $40k–$100k), and KryBit retaliated by stealing and posting 0APT’s operational dataset (including access logs, PHP source and system files), exposing fabricated victim claims and insecure infrastructure; the exchanges have forced both groups to rebuild and rebrand, increasing instability in the ransomware ecosystem.