Stranger Strings: Yurei Ransomware Operator Toolkit Exposed

Reported 01 Apr 2026 by otx · Severity: medium

Active since September 2025, Yurei is a double extortion ransomware campaign. The operators run their own Tor data leak site with a low number of victims listed at the time of writing. It is reportedly derived from Prince Ransomware, an open-source ransomware family written in Go