Two ransomware-as-a-service (RaaS) groups, 0APT and KryBit, engaged in a public feud, breaching each other's infrastructure. 0APT initially leaked an SQL database from Everest and exposed KryBit's operational details, prompting KryBit to retaliate by exfiltrating 0APT's full operational data, including access logs, PHP source code, and system files.
Initial Access
Rival Infrastructure Breach
confirmed
0APT gained unauthorized access to the infrastructure of rival ransomware groups, including Everest and KryBit, as part of its strategy to gain credibility.
Defender cut points
Implement robust network segmentation and strong authentication for all administrative interfaces.
