Description
Troldesh is a ransomware family spread through malspam, typically with attached ZIP files, and it sometimes used a content management system on a compromised website to host its downloads.
Stats
- First seen
- March 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Archive-RAR.Ransomware.Troldesh |
| ByteCode-MSIL.Ransomware.Troldesh |
| Gen:Variant.Ransom.Troldesh.152 |
| Gen:Variant.Ransom.Troldesh.167 |
| Gen:Variant.Ransom.Troldesh.196 |
| Gen:Variant.Ransom.Troldesh.198 |
| Gen:Variant.Ransom.Troldesh.216 |
| Gen:Variant.Ransom.Troldesh.296 |
| Gen:Variant.Ransom.Troldesh.321 |
| Gen:Variant.Ransom.Troldesh.324 |