Description
BigHead is a ransomware family written for the .NET framework that researchers first documented in 2018. It encrypts files with a hybrid scheme and displays a ransom note, and archived samples later circulated in code repositories, letting other cyberattackers deploy modified variants.
Stats
- First seen
- January 2024
- Last seen
- October 2026
Also known as
bighead
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Ransomware.BigHead |
| ByteCode-MSIL.Trojan.BigHead |
| Gen:Variant.BigHead.1 |
| Gen:Variant.BigHead.11 |
| Gen:Variant.bighead.18 |
| Gen:Variant.BigHead.20 |
| Gen:Variant.BigHead.5 |
| Gen:Variant.BigHead.6 |
| Gen:Variant.bighead.8 |
| Gen:Variant.BigHead.9 |