Netskope Threat Labs

SiennaBlue

ATP Sandbox Adv. Heuristics

SiennaBlue is a ransomware family used by the DEV-0530 threat actor group, which Microsoft attributes to North Korean origin.

First seen
July 2022
Last seen
October 2026
Alert Name
Win64.Ransomware.SiennaBlue