HOMETHREATSDharma Ransomware
APT / THREAT GROUP

Dharma Ransomware

1
aliases

Intelligence Profile

It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc.. CrySiS > Dharma Note: ATTENTION! At the moment, your system is not protected. We can fix it and restore files. To restore the system write to this address: [email protected]. CrySiS variant

Threat Analysis

Dharma Ransomware is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://id-ransomware.blogspot.co.il/2016/11/dharma-ransomware.html
→https://www.bleepingcomputer.com/news/security/kaspersky-releases-decryptor-for-the-dharma-ransomware/
→https://www.bleepingcomputer.com/news/security/new-cmb-dharma-ransomware-variant-released/
→https://www.bleepingcomputer.com/news/security/new-bip-dharma-ransomware-variant-released/
→https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-12th-2018-notpetya-gandcrab-and-more/
→https://twitter.com/demonslay335/status/1049313390097813504
→https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-september-14th-2018-kraken-dharma-and-matrix/
→https://twitter.com/JakubKroustek/status/1038680437508501504
→https://twitter.com/demonslay335/status/1059521042383814657
→https://twitter.com/demonslay335/status/1059940414147489792

Quick Facts

TypeAPT / Threat Group
Aliases1

Also Known As

Dharma Ransomware

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Dharma Ransomware