Netskope Threat Labs

VanHelsing

ATP Sandbox Adv. HeuristicsAVNetskope IPS

VanHelsing is a ransomware family that encrypts files on infected systems and demands payment for decryption.

First seen
March 2025
Last seen
October 2026
Vanhelsing
Alert Name
Gen:Variant.Ransom.VanHelsing.3
Gen:Variant.Ransom.VanHelsing.4
Trojan.Ransom.VanHelsing.A
Win32.Ransomware.Vanhelsing
Win32.Ransomware.VanHelsing
Win64.Ransomware.Vanhelsing