Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:50:08 UTC
DescriptionAccording to PCrisk, AtomSilo is a type of malware that blocks access to files by encrypting them and
renames every encrypted file by appending the '.ATOMSILO' to its filename. It renames '1.jpg' to
'1.jpg.ATOMSILO', '2.jpg' to '2.jpg.ATOMSILO', and so on. As its ransom note, AtomSilo creates the 'README-FILE-#COMPUTER-NAME#-#CREATION-TIME#.hta' file.
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2cc89be8-f828-4db4-9ce7-9fdb7b85d5c0
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2cc89be8-f828-4db4-9ce7-9fdb7b85d5c0
Page 1 of 1