TI Mindmap HUB
Threat Intelligence Report

Pay2Key Iranian-Linked Ransomware is Back, Back Again

๐Ÿ“… October 20, 2026 ๐Ÿ“ฐ www.halcyon.ai ๐Ÿ” 0 CVE(s) referenced

Iranian-linked Pay2Key has resurfaced with a faster, stealthier, anti-forensic ransomware variant that crippled a U.S. healthcare environment in three hours, signaling a politically motivated threat escalating alongside tensions involving Iran.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle