Babuk2
Babuk2 is an extortion operation also associated with the name Bjorka.
Profile source: Ransomware.live opens in a new tabBabuk2
Family profile
Babuk2 is an extortion operation also associated with the name Bjorka. Public reporting connects the operation with SatanLock, but the relationship is retained as context rather than treating SatanLock as another name for Babuk2.
Ransomware.live
Operational record
Reporting
Research mentioning Babuk2
New Ransomware Emerged in 2025 – Threat Intel Report
Silent, Gunra, JGroup, IMN Crew, Dire Wolf, DATACARRY, and SatanLock launched leak sites within weeks of each other.
Dragos Industrial Ransomware Analysis: Q3 2025 | Dragos
“Minimal-activity Groups… such as SatanLock… each registered one incident.”
⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and More
"SatanLock Announces Abrupt Shutdown — SatanLock, a newer ransomware group on the threat landscape, has announced that it will be shutting down."
FakeUpdates, Remcos, AgentTesla Top Malware Charts in Stealth Attack Surge
In April, SatanLock emerged as a new ransomware group, listing numerous victims on their data leak site.
