Description
Matrix is ransomware that encrypts files on infected systems and demands payment for decryption. Its operators gained access primarily through brute forcing exposed remote desktop services, and campaigns clustered around certain regions and business sizes. As with similar families, defenders should treat detections as urgent because encryption spreads quickly through network shares once the payload executes.
Stats
- First seen
- May 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Ransomware.Matrix |
| Gen:Variant.Ransom.Matrix.1 |
| Gen:Variant.Ransom.Matrix.16 |
| Gen:Variant.Ransom.Matrix.18 |
| Generic.Ransom.Matrix.07F33115 |
| Generic.Ransom.Matrix.2BA1A421 |
| Generic.Ransom.Matrix.39A46C1B |
| Generic.Ransom.Matrix.4BE75F48 |
| Generic.Ransom.Matrix.51EA897C |
| Generic.Ransom.Matrix.659766B7 |
Related IPS Signatures
Related blogs
