Netskope Threat Labs

Lorenz

ATP Sandbox Adv. HeuristicsAV

Lorenz is a ransomware family whose design and implementation flaws were severe enough that its operators could not provide working decryption tools to paying victims. Researchers released free decryptors for its 2021 versions and for a newer variant found in March 2022 through the NoMoreRansom initiative.

First seen
March 2022
Last seen
October 2026
Alert Name
Gen:Variant.Ransom.Lorenz.11
Gen:Variant.Ransom.Lorenz.15
Gen:Variant.Ransom.Lorenz.19
Gen:Variant.Ransom.Lorenz.2
Gen:Variant.Ransom.Lorenz.8
Trojan.Ransom.Lorenz.A
Trojan.Ransom.Lorenz.B
Win32.Ransomware.Lorenz