Netskope Threat Labs

Scarab

ATP Sandbox Adv. HeuristicsAV

Scarab is a ransomware family that spread in 2017 through phishing emails and later through the Necurs botnet. It encrypted files with a strong algorithm and demanded payment, and leaked builder code later let other cyberattackers produce many modified variants.

First seen
May 2023
Last seen
October 2026
Alert Name
Document-HTML.Trojan.Scarab
Gen:Variant.Ransom.Scarab.3
Gen:Variant.Ransom.Scarab.43
Trojan.Ransom.Scarab.A
Win32.Ransomware.Scarab