All ransomware groups
yanluowang
6 tracked victims
·first seen 2022-07-02·last activity 2022-08-10Group profile
According to PCrisk, Yanluowang is ransomware that encrypts (and renames) files, ends all running processes, stops services, and creates the README.txt file containing a ransom note. It appends the .yanluowang extension to filenames. Cybercriminals behind Yanluowang are targeting enterprise entities and organizations in the financial sector.Files encrypted by Yanluowang can be decrypted with this tool (it is possible to decrypt all files if the original file is larger than 3GB. If the original file is smaller than 3GB, then only smaller files can be decrypted).
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2022-08-10 | H Hot news straight from Cisco | Technology | |
| 2022-07-02 | S Shorr.com leakage | Not Found | |
| 2022-07-02 | G Greetings to havi.com and tmsw.com | Not Found | |
| 2022-07-02 | B Big data dump from various organizations | Not Found | |
| 2022-07-02 | W Walmart was encrypted | Consumer Services | |
| 2022-07-02 | C Cincinnati bell didn’t pay the ransom | Telecommunication |