HelloXD
- First seen
- 2021-11-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:48:21
Targeted industries: technology-and-telecommunications financial-services healthcare-and-pharmaceutical
Context
HelloXD is a ransomware family performing double extortion attacks that surfaced in November 2021. During our research we observed multiple variants impacting Windows and Linux systems. Unlike other ransomware groups, this ransomware family doesn’t have an active leak site; instead it prefers to direct the impacted victim to negotiations through TOX chat and onion-based messenger instances.
Reports & references
- Palo Alto Unit 42 — Helloxd Ransomware (report)