Panzer is a newly emerged Ransomware-as-a-Service (RaaS) operation first observed in August 2026. The group operates a mature affiliate platform and supports attacks across Windows, Linux, ESXi, and FreeBSD environments. Panzer follows a double-extortion model, prioritizing data exfiltration before encrypting systems to increase pressure on victims.
