Kronos Active
Ransomware group first observed in 2023. Uses LaZagne for deployment.1
Total Victims
2023-06-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
43.2d
Avg Delay
0
Negotiations
ONION URLS
lc3rwjpzbopmdhfil7leuyf5ox4mgatnexaoovrglbnjas72p2jr67t3.onion
TOOLS
LaZagne
TDSSKiller
Rclone
Sliver C2
FILE EXTENSIONS
.help
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | National Engineering | Netherlands | Hospitality | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes