Kawa4096
Threat Actor
Kawa4096 is an organized ransomware threat actor that emerged in mid-2025, notable for double extortion tactics, data leak sites on Tor, partial encryption methods to maximize impact, and psychological coercion via branding mimicry, and it has already been linked to multiple international incidents.
Incidents Associated with this Threat
Malware Used by this Threat Actor
No malware identified for this threat actor.