Kazu is an emerging ransomware group active since September 2025 that employs double-extortion tactics, targeting government, healthcare, and financial organizations primarily in Southeast Asia, the Middle East, and Latin America, with notable claimed breaches including Dubai's Ports, Customs and Free Zone Corporation with 1.94 TB exfiltrated.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
kazu ransomware
*/
rule kazu_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.kazu"
description = "Detects kazu ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "kazu" ascii nocase
$name2 = "KAZU" ascii
$onion = "kazu.onion" ascii nocase
condition:
any of them
}
PappyJoe is an India-based healthcare technology company that provides a cloud-based practice management platform for clinics, hospitals, and healthcare professionals. The platform helps manage appointments, electronic medical records (EMR), billing, prescriptions, patient communication, and administrative tasks in one system
Instituto Ferrero de Neurología y Sueño (IFN) is a specialized medical center in Argentina that focuses on the diagnosis and treatment of neurological and sleep disorders. It provides services such as neurology consultations, sleep studies, diagnostic testing, and personalized treatment plans. Using advanced medical technology and a team of specialists, IFN helps patients receive comprehensive care for conditions affecting the brain, nervous system, and sleep health.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| PappyJoe: Healthcare Management System | US | Healthcare | — | 23 ago 2026 |
| Instituto Ferrero de Neurología y Sueño | AR | Healthcare | — | 23 ago 2026 |
| Brazil Mobilemed: Cloud PACS Platform | BR | Healthcare | — | 23 ago 2026 |
| Canada Yocale: Appointment Management System | CA | Professional Services | — | 23 ago 2026 |
| PawlyClinic: Digital Veterinary Care Platform | US | Healthcare | — | 23 ago 2026 |
| Dr Akbar Niazi Teaching Hospital | PK | Healthcare | — | 23 ago 2026 |
| Centro Médico Especializado OSI: Healthcare Solutions | MX | Healthcare | — | 23 ago 2026 |
| Meducar: Telemedicine and Patient Management System | BR | Healthcare | — | 23 ago 2026 |
| ConsultorioMovil: Telemedicine and Healthcare System | MX | Healthcare | — | 23 ago 2026 |
| National Civil Service Commission of Colombia | CO | Government & Defense | — | 11 nov 2025 |
| Defensoría del Pueblo de Colombia – Protection and Promotion of Human Rights | CO | Government & Defense | — | 11 nov 2025 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
Mobilemed is a Brazil-based health technology company that provides a cloud-based PACS (Picture Archiving and Communication System) for radiologists, hospitals, and diagnostic imaging centers. Its platform enables healthcare professionals to securely store, access, manage, and share medical images and diagnostic reports from anywhere, supporting teleradiology and improving workflow efficiency.
Yocale is a cloud-based business management platform that helps appointment-based businesses streamline their daily operations. Founded in Canada, the platform is used by healthcare providers, beauty salons, wellness centers, and other service businesses to manage appointments, client records, payments, and communications in one centralized system.
PawlyClinic is a digital veterinary care platform that connects pet owners with licensed veterinarians through online consultations, appointment booking, and in-clinic referrals. It provides a convenient way for users to access veterinary advice, manage pet health records, and receive treatment without always needing to visit a clinic physically.
Dr. Akbar Niazi Teaching Hospital (ANTH) is a 500-bed tertiary care teaching hospital located in Islamabad, Pakistan. The hospital provides a wide range of healthcare services, including emergency care, surgery, cardiology, orthopedics, pediatrics, gynecology, oncology, diagnostic laboratory services, and specialized outpatient clinics. As a teaching hospital, ANTH is affiliated with medical education and training programs, supporting the development of future healthcare professionals