Krybit Claims Ransomware Attack on efada.sa in Saudi Arabia

Summary

A ransomware.live monitoring post attributes an attack on efada[.]sa to krybit, but says the claim and reported operational impact could not be confirmed.

Key points

• The monitoring record names efada[.]sa in Saudi Arabia as the alleged victim and krybit as the actor.
• The record lists the claim as discovered and published on September 24, 2026.
• The post links to a krybit group source at hxxp://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd[.]onion/blog/pending-6ab577d1234c6-1790277585/.
• The post states that the claims are unconfirmed and invites an official statement from the affected organization.

MITRE ATT&CK

Threat Actors

Countries

Related Articles

• CYFIRMA Report Tracks India Healthcare Threat Activity, With Pharma Claims Unconfirmedcyfirma.comKrybit
• Rapid7: High-Severity Flaws Exploited in Three Days as Ransomware Leads Q3 Threatssecurityweek.comKrybit
• ESET H1 2026 Threat Report Finds Rising ClickFix, QR Phishing and Malicious AI Skillsgithub.com/jacobdjwilsonKrybit
• CYFIRMA Reports 1,046 Ransomware Victim Claims in August 2026, Up 18.2%github.com/jacobdjwilsonKrybit
• CYFIRMA Report Maps Cyber Threats Facing India and SAARC Telecom Sectorcyfirma.comKrybit