Gbhackers iconGbhackersSep 24, 2026

New Galago Ransomware Operation Emerges With Links to Panzer Extortion Group

A newly identified ransomware operation tracked as Galago has emerged with apparent operational links to the Panzer ransomware group, raising concerns of an expanding double-extortion ecosystem targeting organizations worldwide. Researchers began directly monitoring Galago's dark leak site (DLS) on 15 September 2026.

New Galago Ransomware Operation Emerges With Links to Panzer Extortion Group

Share this story

Send the public story page.

Useful takeaways from this story.

A newly identified ransomware operation tracked as Galago has emerged with apparent operational links to the Panzer ransomware group, raising concerns of an expanding double-extortion ecosystem targeting...

Researchers began directly monitoring Galago's dark leak site (DLS) on 15 September 2026.

At the time of observation, the group's Tor-based leak portal was inactive and […]

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

A newly identified ransomware operation tracked as Galago has emerged with apparent operational links to the Panzer ransomware group, raising concerns of an expanding double-extortion ecosystem targeting organizations worldwide. Researchers began directly monitoring Galago's dark leak site (DLS) on 15 September 2026. At the time of observation, the group's Tor-based leak portal was inactive and […]

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app