helldown
- First seen
- 2022-06-15 00:00:00
- Malware type
- trojan, backdoor
- Family
- Malware family
- Profile updated
- 2026-07-07 13:53:55
Targeted industries: government-and-public-sector financial-services technology-and-telecommunications
Targeted regions: country_code:us country_code:ru
Context
Helldown is a sophisticated trojan and backdoor malware family used primarily in cyber-espionage campaigns targeting government and financial sectors in the US and Russia. It typically features advanced evasion techniques and is known for persistent network reconnaissance.
Reports & references
- ransomlook.io — Helldown (report)
- truesec.com — Helldown Ransomware Group (report)
- blog.sekoia.io — Helldown Ransomware An Overview Of This Emerging Threat (report)
- hivepro.com — New Helldown Ransomware A Growing Threat Across Cross Platform Systems (report)
- Broadcom/Symantec — Helldown Ransomware (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Helldown (report)
- medium.com — How To Target European Smes With Ransomware Through Zyxel C9779E96369A (report)
- linkedin.com — Threatmon Helldown Ransomware Malware Technical Analysis Activity 7288187849458245633 Cyfk (report)
- x.com — 1851983952409473308 (report)