Enigma
- First seen
- 2016-11-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:35:31
Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector
Context
Enigma is a ransomware that encrypts files on the victim's system, demanding a ransom to restore access. Initially observed in 2016, it primarily targets sectors dealing with sensitive data.
Detection coverage
- 4 YARA rules
Detection rules
- SEKOIA_Infostealer_Win_Enigma_Stealer_Module (yara-rule)
- SEKOIA_Infostealer_Win_Enigma_Loader_Module (yara-rule)
- SEKOIA_Infostealer_Win_Enigma_Initial_Loader (yara-rule)
- MALPEDIA_Win_Enigma_Loader_Auto (yara-rule)
Reports & references
- bleepingcomputer.com — The Enigma Ransomware Targets Russian Speaking Users (report)
- id-ransomware.blogspot.com — Enigma Ransomware Aes 128 0 (report)