ExilenceTG is a variant from the Key Group ransomware line. It adds .exilenceTG to each locked file and drops a text note called cyber.txt saying the system has been locked but the files are intact. Victims are told to make contact through a Telegram handle or an email address; the note also pads its contact list with a run of the messaging service's own official support addresses. Only one tracker describes it, with no detail on delivery, targets or data theft.
Sources: In-house research
Decryptor: Decryptor availability has not been recorded. Checked 2026-10-26.
Data exfiltration risk: Undocumented — The single available write-up mentions encryption only; nothing indicates data was taken.
Systems typically targeted: Windows PCs
Dealing with an active incident? Our incident response team is available 24/7.
Emergency response: +1 (877) 364-5161