Gwisin (Windows)

First seen
2022-06-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 15:04:37

Targeted industries: energy-and-utilities technology-and-telecommunications

Targeted regions: country_code:kr

Context

Gwisin is a ransomware that primarily targets sectors within South Korea's critical infrastructure, particularly energy and telecommunications, to encrypt files and demand ransom payments.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Gwisin (report)
  • asec.ahnlab.com — 37483 (report)
  • asec.ahnlab.com — 41565 (report)
  • skshieldus.com — Download.Do (report)

External references