CrazyHunter is a Go-based ransomware group exclusively targeting Taiwanese organizations.
CrazyHunter is a Go-based ransomware group that emerged in early 2025, exclusively targeting Taiwanese organizations in healthcare, education, and industrial sectors. It leverages BYOVD techniques and uses tools like SharpGPOAbuse for lateral movement within compromised networks. Defenders should focus on updating signature bases, implementing policies to restrict BYOVD capabilities, and enhancing monitoring against GPO abuse.
CrazyHunter is a Go-based ransomware group that emerged in early 2025, derived from the open-source Prince encryptor, exclusively targeting Taiwanese organizations in healthcare, education, and industrial sectors using BYOVD techniques and tools like SharpGPOAbuse for lateral movement.
The CrazyHunter ransomware group uses SharpGPOAbuse for lateral movement within compromised networks.
CrazyHunter exclusively targets Taiwanese organizations in healthcare, education, and industrial sectors.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.