Evolution
- First seen
- 2020-06-15 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:47:35
Targeted industries: healthcare-and-pharmaceutical government-and-public-sector
Context
Evolution is a ransomware family known for encrypting files and demanding ransom payments. It commonly targets critical sectors like finance, healthcare, and government, often employing encryption mechanisms to lock victims out of their data.
Used by threat actors
- APT29 Cloud TTP Evolution (campaign)
- Scattered Spider TTP Evolution - SaaS Targeting (campaign)
Reports & references
- ransomlook.io — Evolution (report)