0APT threatens to expose Krybit ransomware operation’s data

Newly emergent cybercrime operation 0APT has leaked select data purportedly stolen from the Krybit ransomware gang, while warning that it would expose the identities of its affiliates should the ransomware group refuse to negotiate or pay the demanded ransom, The Register reports.

Analysis of the allegedly pilfered files spilled by 0APT revealed Krybit operator and affiliate plaintext credentials and five cryptocurrency wallet addresses, according to Barricade Cyber Solutions owner Eric Taylor, who noted that there has been no indication that Krybit has fulfilled 0APT's extortion demands. Outages have been impacting Krybit's website.

Hundreds of organizations were claimed to have been compromised by 0APT within 48 hours of its emergence in January, hinting at inflated claims, reported Halcyon's ransomware research center. On the other hand, Krybit may have only been operating for a few weeks, based on dark web tracking data. 0APT's attack against Krybit follows a similar intrusion launched by DragonForce against the BlackLock and Mamona groups last year.