Description
IndustrialSpy is a ransomware variant that emerged in 2022 from malware that previously stole data for sale on a data extortion marketplace. Its operators shifted from selling stolen industrial data outright to encrypting victim systems and demanding payment, blending extortion models. The family targets organizations whose sensitive data has market value, and its history shows how data theft markets and ransomware operations converge.
Stats
- First seen
- December 2022
- Last seen
- September 2026
Also known as
Industrialspy
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Ransom.IndustrialSpy.3 |
| Gen:Variant.Ransom.IndustrialSpy.4 |
| Win64.Ransomware.Industrialspy |
| Win64.Ransomware.IndustrialSpy |
