Abyss Locker
ObscureIQ Threat Intelligence · Actor Profile
Abyss LockerConfidence: High
Ransomware
Also known as: Abyss
Motivation: Financial
2Attributed Breaches
HighAttribution Confidence
RansomwareActor Type
Overview
Runs Linux and ESXi encryptors built on Babuk-derived code, observed since 2023 against enterprise environments in healthcare, manufacturing, finance, technology, and IT. Operates on a likely affiliate-enabled model.
Tactics, Targeting & TTPs
Model: likely affiliate-enabled. Targeting: enterprise, ESXi-heavy environments.
Source
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Were you exposed in one of these breaches?
Check your exposure privately, or request a tailored exposure audit.