Payloadbin
Ransomware Group Profile
Overview
PayloadBIN is a ransomware strain deployed in 2021 by Evil Corp as a rebranding of their WastedLocker/Hades/Phoenix lineage, specifically designed to evade US Treasury OFAC sanctions by impersonating the unrelated Babuk gang's rebrand rather than operating as an independent group.
Dark Web Infrastructure (1)
vbmisqjshn4yblehk2vbnil53tlqklxsdaztgphcilto3vdj4geao5qd.onion
Associated Threat Actors (1)
Activity Timeline
First Seen2022
Last Seen2022
Leak Sites1
Quick Actions