Threat actor · all actors
Pay2KeyHACK-PAY2KEY hacktivist
🇮🇷 IR
aka Pay2Key, Pay2Key.Ransom
Last updated: 2026-07-03
0attributed CVEs
0ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
An IRGC-aligned ransomware-as-hacktivism operation first observed in late 2020 against Israeli logistics and tech firms. Claims followed a hacktivist messaging pattern (anti-Israel proclamations) while attempting cryptocurrency extortion; relaunched in 2025 as Pay2Key.I2P following the OFAC sanctioning of related infrastructure.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
No techniques attributed.
Co-occurring actors
None.
Similar actors
Same nation-state
- HomeLand Justice 1.00
- Outer Space 1.00
- Juicy Mix 1.00
- Cleaver 1.00
- OilRig 1.00
Same category
- Al-Toufan 1.00
- AnonOps 1.00
- Anonymous 1.00
- Anonymous Brasil 1.00
- Anonymous Collective 1.00