Description
DarkBit is a ransomware variant first discovered in early 2023 targeting organizations in Israel. Its operators encrypt files and demand payment through ransom notes, and its campaigns against academic and technology targets drew researcher attention for their political framing. Defenders should treat detections as urgent, because the family's encryption spreads through network shares once the payload executes.
Stats
- First seen
- February 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Trojan.Ransom.DarkBit.A |
| Win64.Ransomware.DarkBit |
