Olympic Destroyer

Internal ID: win.olympic_destroyer

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware which seems to have no function other than to disrupt computer systems related to the 2018 Winter Olympic event.

Threat Analysis

Olympic Destroyer is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→http://blog.talosintelligence.com/2018/02/olympic-destroyer.html

→http://blog.talosintelligence.com/2018/02/who-wasnt-responsible-for-olympic.html

→https://attack.mitre.org/groups/G0034

→https://cyber.wtf/2018/03/28/dissecting-olympic-destroyer-a-walk-through/

→https://enterprise.verizon.com/resources/reports/2019-data-breach-investigations-report.pdf

→https://securelist.com/apt-trends-report-q2-2019/91897/

→https://securelist.com/apt-trends-report-q2-2020/97937/

→https://securelist.com/olympic-destroyer-is-still-alive/86169/

→https://securelist.com/olympicdestroyer-is-here-to-trick-the-industry/84295/

→https://securelist.com/the-devils-in-the-rich-header/84348/

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.olympic_destroyer

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Olympic Destroyer