Netskope Threat Labs

GandGrab

AV

GandGrab is a JavaScript-based malware associated with the GandCrab ransomware family that delivers payloads through web-based infection vectors.

First seen
January 2023
Last seen
July 2025
Alert Name
GT:JS.GandGrab.1.037939AA
GT:JS.GandGrab.1.091527F6
GT:JS.GandGrab.1.0DE9D325
GT:JS.GandGrab.1.0F03F28E
GT:JS.GandGrab.1.12D7FE8F
GT:JS.GandGrab.1.19FBC5C9
GT:JS.GandGrab.1.2B76D51A
GT:JS.GandGrab.1.3825597C
GT:JS.GandGrab.1.38751D32
GT:JS.GandGrab.1.39B1206D