Description
TellYouThePass is a ransomware family that encrypts files and renames them with the .locked extension, dropping a ransom message in a file named README.html. Its operators state that it uses RSA-1024 and AES-256 cryptography, and the family has repeatedly resurfaced in campaigns exploiting newly disclosed vulnerabilities.
Stats
- First seen
- October 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Ransom.TellYouThePass.1 |
| Win64.Ransomware.TellYouThePass |