Gwisin (ELF)
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 14:25:30
Targeted industries: energy-and-utilities government-and-public-sector
Targeted regions: country_code:kr
Context
Gwisin is a Linux-based ransomware variant that has predominantly targeted organizations in South Korea, especially within the energy and government sectors. It is known for encrypting files and demanding ransom payments in exchange for decryption keys.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Gwisin (report)
- research.checkpoint.com — The Platform Matters A Comparative Study On Linux And Windows Ransomware Attacks (report)