CryptoShield
- First seen
- 2019-01-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:24:26
Targeted industries: financial-services healthcare-and-pharmaceutical retail-and-hospitality education-and-nonprofits
Context
CryptoShield is a ransomware family that encrypts files on infected systems and demands a cryptocurrency payment for decryption. It has targeted various industries and employs typical extortion tactics to pressure victims into paying the ransom.
Detection coverage
- 2 YARA rules
Detection rules
- MALPEDIA_Win_Cryptoshield_Auto (yara-rule)
- CAPE_Cryptoshield (yara-rule)
Reports & references
- bleepingcomputer.com — Revenge Ransomware A Cryptomix Variant Being Distributed By Rig Exploit Kit (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Cryptoshield (report)
- broadanalysis.com — Rig Exploit Kit Via The Eitest Delivers Cryptoshieldrevenge Ransomware (report)