Gorgon
- First seen
- 2018-03-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 16:12:18
Targeted industries: government-and-public-sector financial-services technology-and-telecommunications
Context
Gorgon ransomware is a malicious software used by the Gorgon Group, a threat actor known for its cybercrime activities. It has been observed targeting a variety of industries, including government and financial sectors, to encrypt files and demand ransom payments.
Detection coverage
- 4 YARA rules
Detection rules
- DITEKSHEN_MALWARE_Win_Pwshloader_Runpe01 (yara-rule)
- DITEKSHEN_MALWARE_Win_Pwshloader_Runpe02 (yara-rule)
- DITEKSHEN_MALWARE_Win_Peloader_Runpe (yara-rule)
- DITEKSHEN_MALWARE_Win_Peloader_INF (yara-rule)