yanluowang

· InactiveAccording to PCrisk, Yanluowang is ransomware that encrypts (and renames) files, ends all running processes, stops services, and creates the README.txt file containing a ransom note. It appends the .yanluowang extension to filenames. Cybercriminals behind Yanluowang are targeting enterprise entities and organizations in the financial sector.Files encrypted by Yanluowang can be decrypted with this tool (it is possible to decrypt all files if the original file is larger than 3GB. If the original file is smaller than 3GB, then only smaller files can be decrypted).

Victims

Status

Inactive

Sites

Countries Hit

Profile

https://blog.talosintelligence.com/recent-cyber-attack/

https://symantec-enterprise-blogs.security.com/threat-intelligence/yanluowang-ransomware-attacks-continue

Top Countries

Unknown4

DE1

US1

Top Sectors

Unknown2

Technology2

Media1

Retail1

Recent Victims

View all 6 →

Hot news straight from Cisco

DE · Media

Aug 10, 2022

Shorr.com leakage

— · Technology

Jul 2, 2022

Greetings to havi.com and tmsw.com

—

Jul 2, 2022

Big data dump from various organizations

— · Technology

Jul 2, 2022

Walmart was encrypted

US · Retail

Jul 2, 2022

Cincinnati bell didn’t pay the ransom

—

Jul 2, 2022