ShadowByt3$
ShadowByt3$ is a ransomware-as-a-service group first observed in October 2025, using multi-method extortion and communicating via Telegram and Tox, with a very small confirmed victim list suggesting it remains in early-stage operation.
| Name | Country | Sector | Date |
|---|---|---|---|
| HandyTrac Greystar AZ WARNING | US | Other | 2026-09-16T21:53:11.343671+00:00 |
| HandyTrac (Greystar Litchfield Park, AZ) | US | Other | 2026-09-15T00:23:37.508635+00:00 |
| John Engel Team | US | Professional Services | 2026-09-10T05:25:30.437382+00:00 |
| Ben Leeds Properties | GB | Other | 2026-09-07T03:52:12.749532+00:00 |
| BayView Real Estate | US | Retail & E-Commerce | 2026-08-29T01:51:27.108290+00:00 |
| Bayview Real Estate WARNING | US | Retail & E-Commerce | 2026-08-28T06:52:38.874603+00:00 |
| Sinar Mas Agribusiness and Food Golden Agri-Resources) | ID | Agriculture and Food Production | 2026-08-25T14:26:02.536617+00:00 |
| A-Plus Software Limited | GB | Technology | 2026-08-25T14:25:27.547858+00:00 |
| Knottingham Trent University | GB | Education | 2026-08-25T14:24:56.130872+00:00 |
| TINYpulse NINTENDO BREACH | JP | Technology | 2026-06-16T06:50:21.954593+00:00 |
| Nintendo Company | JP | Technology | 2026-06-12T17:50:18.874752+00:00 |
| Lead Company (Leadership Boulevard) | — | Professional Services | 2026-06-03T00:20:16.635974+00:00 |
| Cropwise (Syngenta Group) | CH | Agriculture and Food Production | 2026-06-02T04:20:12.877865+00:00 |
| Hotelogix Company | IN | Hospitality | 2026-05-21T06:22:11.225742+00:00 |
| StarBucks Company | US | Hospitality | 2026-05-21T05:52:10.947443+00:00 |
| PowerCampus | IN | Education | 2026-05-14T19:49:40.855479+00:00 |
| Stride Learning | US | Education | 2026-05-14T16:47:59.675677+00:00 |
| Amplify Technology | GB | Technology | 2026-05-14T16:47:47.254724+00:00 |
| University Of Georgia | US | Education | 2026-05-14T16:47:31.750340+00:00 |
| Hotelogix | SG | Hospitality | 2026-05-14T16:47:19.110857+00:00 |
| UMSA | — | Education | 2026-02-25T12:54:56.965666+00:00 |
Data from ransomware.live