Who’s Behind The Styx-Crypt Exploit Pack?
Summary: Krebs on Security traced the Styx exploit kit, a crimeware-as-a-service sold through the public site styx-crypt[dot]com, to Webmoney accounts tied to usernames "Ikar" and "Nazar" and to a trail of domains registered to nazar@hush.ai. The site was taken down hours after the story ran, but archived pages linked the operation to a Khmelnitsky, Ukraine web designer who built styx-crypt[dot]com and to associates using the nicknames FonMax and Renzor.
What's compelling: The kit was marketed on an open website rather than a private forum, and the people behind it also ran uptimer.biz and advertised "Reality Guard" bulletproof hosting against DDoS - the same infrastructure skills used to defend sites being sold to attack them.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026