APT / THREAT GROUP

Matrix

aliases

Intelligence Profile

It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc…

Threat Analysis

Matrix is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning Matrix

Huntress and DEFCERT Are Streamlining CMMC Assessment Prep

Huntress Blog· Nov 5, 2025

External References

→https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-december-2nd-2016-screenlockers-kangaroo-the-sfmta-and-more/

→https://id-ransomware.blogspot.co.il/2016/12/matrix-ransomware.html

→https://twitter.com/rommeljoven17/status/804251901529231360

→https://www.bleepingcomputer.com/news/security/new-matrix-ransomware-variants-installed-via-hacked-remote-desktop-services/

→https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-august-31st-2018-devs-on-vacation/

→https://twitter.com/demonslay335/status/1034212374805278720

→https://www.bleepingcomputer.com/news/security/new-fox-ransomware-matrix-variant-tries-its-best-to-close-all-file-handles/

→https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-12th-2018-notpetya-gandcrab-and-more/

→https://twitter.com/demonslay335/status/1049314118409306112

→https://twitter.com/demonslay335/status/1050118985210048512

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

Malta RansomwareMatrixMatrix Ransomware

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Matrix