Back to Threat Groups

onyx

INACTIVE

ransomware group

Onyx is a ransomware group first observed in April 2022, based on the Chaos ransomware builder, that is notably destruct

Victims
14
records
First Discovered
Apr 29, 2022
victim
Last Discovered
Sep 27, 2022
victim
Inactive Since
1,464
days
Countries
1
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026