MALWARE FAMILY
Disk Knight
Internal ID: win.disk_knight
13
victims
1
aliases
Last seen:Mar 17, 2026
Intelligence Profile
Malware family identifying win.disk_knight. Origin and technical characteristics tracked via Malpedia.
Threat Analysis
Disk Knight is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.
Ransomware Victims (13)
CTIWATCH tracks 13 organizations claimed as victims by Disk Knight on its data leak site, with attack dates, sectors and countries.
View full victims list →External References
Quick Facts
TypeMalware Family
Aliases1
Also Known As
win.disk_knight
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.