Hermes

Description

Hermes is a ransomware family associated with North Korean actors, documented in the Lazarus malware constellation and in reports on the country's cyber program. Its code base was later reused or imitated by other ransomware brands, and researchers have noted the family's resemblance to later strains such as MarraCrypt.

Stats

First seen

May 2022

Last seen

October 2026

Alert name variants

References

• malpedia.caad.fkie.fraunhofer.de →