Description
Yanluowang is a ransomware family that encrypts and renames files with the .yanluowang extension, terminates running processes, stops services, and drops a ransom note. Its operators target enterprise entities and organizations in the financial sector, and researchers have published a decrypter that works for victims whose original files were larger than 3 GB.
Stats
- First seen
- March 2022
- Last seen
- September 2026
Alert name variants
| Alert Name |
|---|
| Win32.Ransomware.Yanluowang |