Netskope Threat Labs

CryptoDefense

ATP Sandbox Adv. Heuristics

CryptoDefense is a ransomware family from 2014 that imitated CryptoLocker and encrypted files with strong cryptography while demanding payment. Its implementation left the private decryption key on victim machines, which let researchers recover files without paying, and the flaw was later addressed in its successors.

First seen
February 2022
Last seen
October 2026
Alert Name
Win32.Ransomware.CryptoDefense