Babuk

Reported Context (1)

observed in attacks against Russian companies in 2025. As final payloads, the attackers use LockBit and Babuk ransomware, as well as Tactical RMM and MeshAgent to maintain persistence. For initial access, they QuietCrabs and Thor Exploited RCE Flaws in Campaigns Against Russian Companies

CVE (4)

Malware (3)

People (3)

Threat Actors (6)

MITRE ATT&CK (13)

Vendors (2)

Products (2)

Tools (8)

Industries (3)

Countries (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.