Skip to content
Ransomware group

Sevyware

SevyWare emerged in June 2026 as a ransomware-as-a-service and data-extortion operation.

Profile source: WatchGuard Threat Lab opens in a new tab

Sevyware

Family profile

SevyWare emerged in June 2026 as a ransomware-as-a-service and data-extortion operation. The group advertised an affiliate program and recruited initial-access brokers and insiders.

Ransomware.live

Operational record

View group record ↗

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.