yanluowang
Activity analysis
HackerFeeds has tracked 6 victims claimed by yanluowang since July 2022, most recently in August 2022 — ranking #251 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in August 2022. Its most-targeted sector is Telecommunication (1 victims), followed by Technology (1).
Victims per year
- 20226
Top sectors
- Telecommunication1
- Technology1
- Consumer Services1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
According to PCrisk, Yanluowang is ransomware that encrypts (and renames) files, ends all running processes, stops services, and creates the README.txt file containing a ransom note. It appends the .yanluowang extension to filenames. Cybercriminals behind Yanluowang are targeting enterprise entities and organizations in the financial sector.Files encrypted by Yanluowang can be decrypted with this tool (it is possible to decrypt all files if the original file is larger than 3GB. If the original file is smaller than 3GB, then only smaller files can be decrypted).
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2022-08-10 | H Hot news straight from Cisco | Technology | |
| 2022-07-02 | S Shorr.com leakage | Retail & E-Commerce | |
| 2022-07-02 | G Greetings to havi.com and tmsw.com | Not Found | |
| 2022-07-02 | B Big data dump from various organizations | Not Found | |
| 2022-07-02 | W Walmart was encrypted | Retail & E-Commerce | |
| 2022-07-02 | C Cincinnati bell didn’t pay the ransom | Technology |