Cring

Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:44:22

Targeted industries: manufacturing energy-and-utilities

Targeted regions: country_code:de country_code:ch

Context

Cring is a ransomware strain known for targeting organizations in the manufacturing and energy sectors. It encrypts files on infected systems, demanding a ransom in exchange for a decryption key.

Reports & references

  • news.sophos.com — The Ransomware Threat Intelligence Center (report)
  • twitter.com — 1354052879158571008 (report)
  • Trend Micro — Examining The Cring Ransomware Techniques (report)
  • news.sophos.com — Cring Ransomware Group Exploits Ancient Coldfusion Server (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Cring (report)
  • CISA — Aa25 050A (report)
  • ics-cert.kaspersky.com — Kaspersky Ics Cert Vulnerability In Fortigate Vpn Servers Is Exploited In Cring Ransomware Attacks En (report)

External references