kawa4096 Unknown

First seen: -
0
Total Victims
0
Victims (30d)
Details

Kawa4096 is a ransomware group that emerged in June 2025, targeting multinational corporations across finance, education, and services sectors primarily in the US and Japan, using partial-encryption (25% of each file chunk) with Salsa20 and a leak site styled after Akira's retro terminal aesthetic, claiming at least 11 victims.

Leak Site

Onion URL: http://kawasa2qo7345dt7ogxmx7qmn6z2hnwaoi3h5aeosupozkddqwp6lqqd.onion

Metadata

Slug: kawa4096

Created: 14/01/2026 08:19

Updated: 28/06/2026 16:02

Back