gammax
Intelligence Assessment
Gammax is a ransomware operation motivated by financial gain. The group recently emerged as a threat actor in the cyber landscape.
The group has claimed two victims in the last 90 days, specifically targeting the Energy & Utilities and Retail & E-Commerce sectors in Canada and Colombia.
With activity recorded as recently as July 30, 2026, the actor is currently active.
Threat Analysis
gammax is a ransomware operation that deploys encryption-based extortion against organizations globally. This group maintains a data leak site (DLS) to pressure victims into paying ransom demands.
Financially motivated threat actors like gammax prioritize monetary gain through methods such as ransomware deployment, banking trojans, cryptocurrency theft, BEC scams, or credential harvesting for resale on underground markets.
Ransomware Victims (3)
CTIWATCH tracks 3 organizations claimed as victims by gammax on its data leak site, with attack dates, sectors and countries.
View full victims list →