Netskope Threat Labs

Stampado

ATP Sandbox Adv. HeuristicsAV

Stampado is ransomware that encrypts files on infected systems and demands payment for decryption. Its operators sold it cheaply on underground forums, which made it accessible to low skilled crews, and its campaigns spread through phishing and spam deliveries. Although modest in sophistication, the family's affordability illustrates how ransomware tooling became a commodity available to any operator with a spam list.

First seen
January 2022
Last seen
October 2026
Alert Name
AIT:Trojan.Ransom.Stampado.Y
Generic.Ransom.Stampado.01CFD00B
Generic.Ransom.Stampado.0497DAD2
Generic.Ransom.Stampado.16E1045D
Generic.Ransom.Stampado.17C218B6
Generic.Ransom.Stampado.1A45D21E
Generic.Ransom.Stampado.1B097A06
Generic.Ransom.Stampado.20AB2081
Generic.Ransom.Stampado.276DD721
Generic.Ransom.Stampado.27E5146C