ATLAS

First seen
2021-08-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 16:01:57

Targeted industries: government-and-public-sector financial-services retail-and-hospitality

Context

ATLAS is a type of ransomware that encrypts the victim's data and demands a ransom for decryption. It has targeted various sectors, including government, finance, and retail, and is part of a wider family of ransomware attacks.

Detection coverage

  • 3 YARA rules

Detection rules

  • SEKOIA_Clipper_Win_Atlas_Strings (yara-rule)
  • CAPE_Atlas (yara-rule)
  • MALPEDIA_Win_Atlas_Agent_Auto (yara-rule)