Sicarii Ransomware: Truth vs Myth
Key findings Sicarii is a newly observed RaaS operation that surfaced in late 2025 and has only published 1 claimed victim. The group explicitly brands itself as Israeli/Jewish, using Hebrew language, historical symbols, and extremist right-wing ideological references not usually seen in financially-motivated ransomware operations. Underground online activity associated with Sicarii is primarily conducted in Russian, including RaaS…


