Domino
- First seen
- 2016-01-01 00:00:00
- Malware type
- ransomware
- Last IoC activity
- 2026-04-22 07:07:12
- Profile updated
- 2026-07-07 13:35:08
Targeted industries: education-and-nonprofits government-and-public-sector healthcare-and-pharmaceutical
Context
Domino is a ransomware variant derived from the open-source project Hidden Tear. It encrypts files on the infected machine, demanding a ransom for decryption.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Domino_Auto (yara-rule)
Reports & references
- nyxbone.com — Domino (report)
- bleepingcomputer.com — The Curious Case Of The Domino Ransomware A Windows Crack And A Cow (report)
- id-ransomware.blogspot.com — Domino Ransomware (report)