MarsJoke

Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:37:59

Targeted industries: government-and-public-sector education-and-nonprofits

Targeted regions: country_code:us country_code:ru

Context

MarsJoke is a ransomware known for targeting government and educational sectors. It was observed propagating via large-scale email campaigns, encrypting victim files, and demanding a ransom payment for decryption.

Reports & references

  • securelist.ru — Polyglot The Fake Ctb Locker (report)
  • proofpoint.com — Marsjoke Ransomware Mimics Ctb Locker (report)
  • id-ransomware.blogspot.com — Jokefrommars Ransomware (report)

External references