Netskope Threat Labs

NoEscape

ATP Sandbox Adv. Heuristics

NoEscape is a ransomware as a service operation that emerged in 2023 as a rebrand of the Avaddon code base. Its affiliates targeted organizations across manufacturing, professional services, and other sectors with double extortion, and researchers documented a Linux encryptor that extended attacks to VMware ESXi environments.

First seen
June 2023
Last seen
September 2026
Noescape
Alert Name
Linux.Ransomware.NoEscape
Linux.Trojan.Noescape
Win32.Ransomware.Noescape
Win32.Ransomware.NoEscape
Win32.Trojan.Noescape