FONIX
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-07-11 11:24:47
- Profile updated
- 2026-07-07 15:01:53
Context
FONIX is a ransomware family known for encrypting victims' files and demanding a ransom for decryption. The malware utilizes multiple encryption algorithms to secure files, making it difficult for victims to recover their data without the decryption key.
Detection coverage
- 3 YARA rules
Detection rules
- MALPEDIA_Win_Fonix_Auto (yara-rule)
- DITEKSHEN_MALWARE_Win_Fonix (yara-rule)
- SEKOIA_Ransomware_Win_Fonix (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Fonix (report)
- labs.sentinelone.com — The Fonix Raas New Low Key Threat With Unnecessary Complexities (report)
- labs.bitdefender.com — Fonix Ransomware Decryptor (report)