0APT ransomware gang extorts Krybit amid doxxing threat

Ransomware gang 0APT has turned its extortion tactics against rival criminal group Krybit, threatening to expose the identities, photos, names, and locations of Krybit affiliates unless payment is made. Security researchers who analyzed the leaked sample found plaintext credentials, cryptocurrency wallet addresses, and no evidence of any paid ransoms. Krybit's website has gone dark. The move mirrors a broader trend of criminal-on-criminal attacks, with DragonForce having previously targeted BlackLock, Mamona, and RansomHub in similar fashion. 0APT launched in January 2026 and, despite inflated victim claims, is considered a credible threat by researchers.