
Payload Ransomware Uses Babuk-Inspired Encryption In Attacks On Windows and ESXi
A new ransomware operation called Payload is targeting enterprise environments, using encryption techniques similar to those in the leaked Babuk ransomware source code. The group has been active since at least February 17, 2026, and has already listed multiple victims on its Tor leak site. On March 15, the attackers claimed responsibility for a breach […] The post Payload Ransomware Uses Babuk-Inspired Encryption In Attacks On Windows and ESXi appeared first on Cyber Security News.