Netskope Threat Labs

CyberVolk

ATP Sandbox Adv. HeuristicsNetskope IPS

CyberVolk is a ransomware family that emerged in 2024 and used hacktivist branding in its extortion operations. Its affiliates have gained access through exposed remote services and compromised credentials, and researchers have noted that the operation borrows leaked source code from other ransomware families.

First seen
July 2024
Last seen
September 2026
Cybervolk
Alert Name
Win32.Ransomware.Cybervolk
Win32.Ransomware.CyberVolk
Win64.Ransomware.CyberVolk