Galago Ransomware Emerges With Shared Infrastructure Ties to Panzer

Reported 24 Sep 2026 by otx · Severity: medium

Galago is a newly identified ransomware operation that emerged in September 2026, claiming operational partnership with the Panzer ransomware group. The connection is suggested through shared infrastructure, specifically matching prefixes in their Tor leak-site addresses (pnzr4de