Erebus

First seen
2017-02-01 00:00:00
Malware type
ransomware
Family
Malware family
Last IoC activity
2026-05-21 07:08:04
Profile updated
2026-07-07 16:19:38

Targeted industries: government-and-public-sector financial-services

Targeted regions: country_code:kr

Context

Erebus is a ransomware family known to target South Korean entities, specifically within the government and financial services industries. It gained notoriety after a major attack in 2017, where it encrypted and demanded payment for data decryption.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Erebus_Auto (yara-rule)

Related threat objects