สำ นักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Groups Tools Search Statistics
Home > List all groups > List all tools > List all groups using tool Ryuk Search
Threat Group Cards: A Threat Actor Encyclopedia
 Tool: Ryuk
Names Ryuk
Category Malware
Type Ransomware, Big Game Hunting
Description Ryuk is a ransomware which encrypts its victim's files and asks for a ransom via bitcoin to release the original files. It is has been
observed being used to attack companies or professional environments. Cybersecurity experts figured out that Ryuk and Hermes
ransomware shares pieces of codes. Hermes is commodity ransomware that has been observed for sale on dark-net forums and
used by multiple threat actors.
Information MITRE ATT&CK Malpedia AlienVault OTX Playbook Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool Ryuk
Changed Name Country Observed
APT groups
 FIN6, Skeleton Spider [Unknown] 2015-Oct 2021
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7ecebee3-176f-47c2-9b9d-4d086f283711
Page 1 of 2

↑
  Wizard Spider, Gold Blackburn 2014-May 2025
Other groups
  UNC1878 [Unknown] 2020  
3 groups listed (2 APT, 1 other, 0 unknown)
Infrastructure and Security Department
Electronic Transactions Development Agency
Follow us on
 
Report incidents
+66 (0)2-123-1227
helpdesk@etda.or.th
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7ecebee3-176f-47c2-9b9d-4d086f283711
Page 2 of 2