Gangs
P

Payload

Active

Total victims

51

This month

1

Active

—

DayBreach AI intelligence

Gang profile and current news · from web sources

Loading…

How it operates

Payload is a ransomware group that emerged in early 2026, using Babuk-derived source code targeting both Windows and ESXi systems with cross-platform double-extortion attacks against healthcare, energy, real estate, and agriculture sectors, claiming 12 victims across seven countries within hours of launching its leak site.

Targeted sectors

Production%22
Retail & E-Commerce%14
Professional Services%12
Turizm%8
Other%44

Recent victims

Boullard Musique

Retail & E-Commerce · 3 gün önce

B

B&B Hydraulik

Manufacturing · 2 ay önce

S

Stücheli Architekten

Professional Services · 2 ay önce

B

Baya Technologies

Technology · 2 ay

Hans & Jos. Kronenberg GmbH

Manufacturing · 2 ay önce

CKR Consulting Engineers

Professional Services · 2 ay önce

R

Roofinox

Manufacturing · 3 ay

The commune of Castries

Government & Defense · 3 ay önce

E

ENB Versich

Energy & Utilities · 3 ay önce

V

Vela Film S.r.l.

Retail & E-Commerce · 3 ay önce