Published: October 19, 2026 Category: Removal guides
1. Coffin Locker Ransomware
What kind of malware is Coffin Locker?
Coffin Locker is ransomware our research team found while inspecting new submissions on VirusTotal. It encrypts victim files, appends the .coffin extension, drops a ransom note text file in every directory, and replaces the desktop wallpaper.
On our test machine, ...
Published: October 18, 2026 Category: Removal guides
2. Citrus Ransomware
What kind of malware is Citrus Ransomware?
Citrus Ransomware is ransomware our research team discovered while examining new file submissions to the VirusTotal website. It encrypts victims' files to make them inaccessible and demands payment in exchange for a decryption tool.
Beyond encrypting files, ...
Published: October 15, 2026 Category: Removal guides
3. Hexsomeware Ransomware
What kind of malware is Hexsomeware?
Hexsomeware is ransomware our research team identified while examining new malware samples submitted to VirusTotal. It encrypts files, appends a .hexsomeware extension to filenames, and presents ransom demands through a full-screen pop-up and a dropped text file. ...
Published: October 14, 2026 Category: Removal guides
4. Has Ransomware
What kind of malware is Has?
Has is a ransomware-type program and a member of the Dharma ransomware family. Our research team identified it while analyzing new malware submissions on VirusTotal. It encrypts victim files and demands payment for decryption, also threatening to leak data it claims to ...
Published: October 12, 2026 Category: Removal guides
5. SAMURAI-SEC Ransomware
What kind of malware is SAMURAI-SEC?
SAMURAI-SEC is ransomware that we found while examining new malware samples submitted to VirusTotal. It is based on the Chaos ransomware family. This malware encrypts files and demands payment for decryption. It also steals data before locking files, threatening ...
Published: October 11, 2026 Category: Removal guides
6. ByteBane Ransomware
What kind of malware is ByteBane ransomware?
ByteBane is ransomware that we discovered while examining new malware samples submitted to the VirusTotal website. It encrypts files, appends the .bytebane extension to their filenames, changes the desktop wallpaper, and drops a ransom note in a text file ...
Published: October 11, 2026 Category: Removal guides
7. MAJIN Ransomware
What kind of malware is MAJIN ransomware?
MAJIN ransomware is ransomware our research team identified while examining new malware submissions on VirusTotal. It encrypts victims' files, exfiltrates sensitive data from the affected network, and threatens to publish stolen information publicly unless ...
Published: October 05, 2026 Category: News
8. Warlock Ransomware Hits Water And Telecom Firms Via SharePoint
A China-linked ransomware operation known as Warlock has breached a water utility, a telecommunications provider, a regional government body, and a university. The attackers gained initial access to each network by exploiting vulnerabilities in on-premises Microsoft SharePoint servers, a tactic the group ...
Published: October 04, 2026 Category: Removal guides
9. Calipso Ransomware
What kind of malware is Calipso Ransomware?
Calipso is ransomware that our researchers found while examining new malware samples submitted to the VirusTotal platform. It encrypts files, appends the ".calipso" extension to their names, changes the desktop wallpaper, and leaves a ransom note in a text ...
Published: October 04, 2026 Category: Removal guides
10. EniFrost Ransomware
What kind of malware is EniFrost?
EniFrost is ransomware that our researchers discovered while examining malware samples submitted to VirusTotal. It encrypts victims' files using AES-256 encryption and demands a ransom payment in exchange for the decryption key.
Unlike most ransomware, EniFrost does ...
Published: October 04, 2026 Category: Removal guides
11. Zynex Ransomware
What kind of malware is Zynex ransomware?
Zynex is ransomware our research team identified while analyzing new file submissions on VirusTotal. It encrypts files, appends the .zynx extension to their names, and leaves a ransom note in a text file called readme.txt. The attackers also claim to exfiltrate ...
Published: October 04, 2026 Category: Removal guides
12. Flyware Ransomware
What kind of malware is Flyware?
Flyware is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. Like most ransomware, it encrypts files on the infected machine and demands payment in exchange for a decryption key.
On our test machine, ...
Published: October 03, 2026 Category: Removal guides
13. MAIN Ransomware
What kind of malware is MAIN?
MAIN is ransomware belonging to the Dharma ransomware family. Our team discovered it during a routine inspection of new submissions to VirusTotal. It encrypts files, appends a complex extension to their filenames, and drops two ransom notes - a pop-up window and a text ...
Published: September 19, 2026 Category: Removal guides
14. RIED Ransomware
What kind of malware is RIED Ransomware?
RIED Ransomware is ransomware that we discovered while examining new file submissions on VirusTotal. It belongs to the Makop ransomware family. Like other members of this group, it encrypts files, adds a distinctive extension to their filenames, drops a ransom ...
Published: September 15, 2026 Category: Removal guides
15. Altair Ransomware
What kind of malware is Altair Ransomware?
Altair is ransomware that our researchers discovered during a routine inspection of new malware samples submitted to VirusTotal. It encrypts victims' files, appends a numbered extension to filenames, and creates an HTML ransom note. The attackers also claim ...
Published: September 14, 2026 Category: Removal guides
16. Sword Ransomware
What kind of malware is Sword?
Sword is a piece of ransomware that our researchers came across while inspecting new samples submitted to VirusTotal. It encrypts files, drops 20 copies of a text-based ransom note on the desktop, and locks the screen with a full-screen message. The lock screen comes ...
Published: September 13, 2026 Category: Removal guides
17. Vricpe Ransomware
What kind of malware is Vricpe ransomware?
Vricpe is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's device and demands payment in exchange for the decryption key.
On our test machine, Vricpe entirely ...
Published: September 13, 2026 Category: Removal guides
18. Face Melter Ransomware
What kind of malware is Face Melter?
Face Melter is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files, appending the .facemelter extension to their filenames, changes the desktop wallpaper, and creates a ransom note ...
Published: September 13, 2026 Category: Removal guides
19. Regulus Ransomware
What kind of malware is Regulus?
Regulus is ransomware our researchers found while examining new file submissions on VirusTotal. It encrypts victims' files and demands payment for a decryption tool. The attackers also claim to steal sensitive data and threaten to expose it publicly if the ransom is ...
Published: September 09, 2026 Category: Removal guides
20. NoxLock Ransomware
What kind of malware is NoxLock Ransomware?
NoxLock is ransomware our researchers discovered during a routine inspection of new submissions to the VirusTotal website. It encrypts files and replaces both the original name and the extension of each file with random character strings. NoxLock also claims ...
Published: September 09, 2026 Category: News
21. Veradigm Breach Linked To Gentlemen Ransomware's Growing Arsenal
... individuals and customers are now being notified, and credit-monitoring services are being offered where applicable. Veradigm has not publicly named the attacker responsible for the breach, but a ransomware group has already claimed credit. The Gentlemen ransomware operation listed Veradigm on its dark ...
Published: September 06, 2026 Category: Removal guides
22. qTox Ransomware
What kind of malware is qTox Ransomware?
qTox Ransomware is a ransomware-type program discovered by our researchers while examining new file submissions to the VirusTotal website. It encrypts victims' files, appends a new extension to their names, and claims to steal sensitive data from the infected ...
Published: September 06, 2026 Category: Removal guides
23. InWatch Ransomware
What kind of malware is InWatch Ransomware?
InWatch is ransomware discovered by our researchers while examining new submissions to the VirusTotal website. It encrypts files on the victim's computer and demands payment for decryption.
On our test machine, InWatch appended the ".InWatch" extension ...
Published: August 31, 2026 Category: Removal guides
24. HMDL Ransomware
What kind of malware is HMDL?
HMDL is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. It encrypts files on the victim's computer, making them impossible to open.
Unlike most ransomware, HMDL does not append any extension to the files ...
Published: August 30, 2026 Category: Removal guides
25. Aldet Ransomware
What kind of malware is Aldet Ransomware?
Aldet is ransomware our research team identified during a routine inspection of new submissions to the VirusTotal website. It encrypts files, appends a unique victim ID, the attackers' email address, and a ".aldet" extension to filenames, drops a ransom note, ...
Published: August 26, 2026 Category: Removal guides
26. Fiasco Ransomware
What kind of malware is Fiasco Ransomware?
Fiasco Ransomware is ransomware that our research team found while inspecting new submissions to VirusTotal. It encrypts files, appends the ".secure" extension to their filenames, and drops a ransom note. The attackers also claim to steal sensitive data before ...
Published: August 23, 2026 Category: Removal guides
27. Grandeur Ransomware
What kind of malware is Grandeur?
Grandeur is ransomware found by our research team during a routine inspection of new submissions to VirusTotal. It belongs to the VoidCrypt ransomware family and encrypts victims' files, demanding payment for their recovery.
On our test machine, this ransomware encrypted ...
Published: August 19, 2026 Category: News
28. Ransomware Affiliate Poses As Fake 'Ransom Busters' Recovery Firm
A threat actor operating under the name "Ransom Busters" is contacting ransomware victims directly, posing as an independent recovery service that can delete stolen data and provide decryption keys in exchange for payment. Security researchers now believe the entity is not a legitimate third party at ...
Published: August 17, 2026 Category: News
29. Clop Ransomware Hits Philips, GE, And Shell
Industrial and energy giants Philips, General Electric (GE), and Shell have all confirmed they are investigating claims made by the Clop ransomware gang that it stole data from their systems. The disclosures follow a wider extortion campaign in which the cybercrime group exploited a critical vulnerability ...
Published: August 16, 2026 Category: Removal guides
30. KIMO Ransomware
What kind of malware is KIMO Ransomware?
KIMO is ransomware our researchers discovered while analyzing new malware samples submitted to VirusTotal. It encrypts files using AES-256-CTR and appends the .KIMO extension to every file it locks.
On our test machine, this ransomware encrypted files and ...
