Signalis
sign in--:--:--UTC
Threat actors

Kairos

☆ pin
Reports
21
First seen
May 11, 2026
Last seen
Oct 14, 2026
Motivation
Financial

Targeting

Sectors
Government ×5Education ×3Manufacturing ×3Retail & E-commerce ×2Professional Services ×1Healthcare ×1Telecommunications ×1
Victim regions
×1
×5
United States×5
France×3
Canada×2
Spain×2
Australia×2
United Kingdom×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1041 Exfiltration Over C2 Channel ×1T1005 Data from Local System ×1T1078 Valid Accounts ×1

Indicators

domain ×24hash_md5 ×2ip_v4 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Kairos ransomware gang claims Oceania Digital Communications as victim

ransomware.liveHigh

Kairos ransomware publishes Oceania Digital Communications as victim

ransomware.liveHigh

Kairos ransomware gang claims Slate Valley Unified School District victim

ransomware.liveHigh

Kairos ransomware gang publishes Le Centre National de l'Expertise Hospitalière as victim

ransomware.liveMedium

Kairos ransomware gang claims Unique Repair Services victim

ransomware.liveHigh

Kairos ransomware gang publishes Krapf Group as victim

ransomware.liveHigh

Kairos claims Leisure Coast Kitchens as ransomware victim

ransomware.liveHigh

Kairos ransomware claims Ville de Libercourt as victim

ransomware.liveHigh

Kairos ransomware gang publishes Ayuntamiento de Velilla de San Antonio as victim

ransomware.liveHigh

Kairos ransomware gang publishes Hightech Signs as victim

ransomware.liveHigh

Kairos ransomware gang publishes Warwick Fabrics as victim

ransomware.liveMedium

Kairos ransomware gang publishes Thermalex Inc as victim

ransomware.liveMedium

Kairos ransomware gang publishes LR Reed as victim

ransomware.liveHigh

Kairos ransomware gang claims College O'Sullivan de Québec breach

ransomware.liveHigh

Kairos ransomware publishes Collège O'Sullivan de Québec as victim

ransomware.liveHigh

U.S. Government Entity Paid $1M in Data-Theft Extortion to Kairos Group

The Hacker NewsHigh

Kairos ransomware gang publishes Mortensen Law Offices as victim

ransomware.liveHigh

Kairos ransomware gang publishes Commune De Camiers as victim

ransomware.liveHigh

Kairos ransomware claims McCarthy Inc victim

ransomware.liveHigh

Kairos ransomware gang publishes Arwini as new victim

ransomware.liveHigh

Kairos publishes Ayuntamiento de Valdemoro as ransomware victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans