Gangs
O

Onyx

Inactive

Total victims

0

This month

0

Active

—

DayBreach AI intelligence

Gang profile and current news · from web sources

Loading…

How it operates

Onyx is a ransomware group first observed in April 2022, based on the Chaos ransomware builder, that is notably destructive — files larger than 2MB are overwritten with random data rather than encrypted, making recovery impossible even after ransom payment — claiming approximately 13 victims across six countries.