Endurance
- First seen
- 2023-01-01 00:00:00
- Malware type
- wiper, ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:49:27
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
Endurance is a destructive ransomware variant first observed in 2023, developed and operated by the threat actor known as IntelBroker (also referred to as Butler Spider). Rather than encrypting files for decryption, it functions primarily as a data wiper, overwriting file contents, appending randomized filenames, and then deleting the files altogether. The source code for the malware was intentionally made public by the operator, indicating its use as both a tool and a statement. Endurance was used in high-profile breaches, including targeting government agencies, large enterprises, and telecommunications providers.
Reports & references
- ransomlook.io — Endurance (report)
- watchguard.com — Endurance (report)
- mphasis.com — June 21 12 The Intelbroker Data Leak Threat Actor (report)
- Wikipedia — Intelbroker (report)
- CrowdStrike — Butler Spider (report)