Matrix
Aliases: Malta Ransomware, Matrix Ransomware
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-07-14 16:00:52
- Profile updated
- 2026-07-07 13:29:14
Context
It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc…
Detection coverage
- 3 YARA rules
Used by threat actors
- APT29 TeamCity Exploits (campaign)
- Pikabot Distribution Campaigns 2023 (campaign)
Detection rules
- ARKBIRD_SOLG_RAN_Matrix_Sep_2020_1 (yara-rule)
- DITEKSHEN_MALWARE_Win_Vssdestroy (yara-rule)
- MALPEDIA_Win_Matrix_Banker_Auto (yara-rule)
Reports & references
- bleepingcomputer.com — The Week In Ransomware December 2Nd 2016 Screenlockers Kangaroo The Sfmta And More (report)
- id-ransomware.blogspot.co.il — Matrix Ransomware (report)
- twitter.com — 804251901529231360 (report)
- bleepingcomputer.com — New Matrix Ransomware Variants Installed Via Hacked Remote Desktop Services (report)
- bleepingcomputer.com — The Week In Ransomware August 31St 2018 Devs On Vacation (report)
- twitter.com — 1034212374805278720 (report)
- bleepingcomputer.com — New Fox Ransomware Matrix Variant Tries Its Best To Close All File Handles (report)
- bleepingcomputer.com — The Week In Ransomware October 12Th 2018 Notpetya Gandcrab And More (report)
- twitter.com — 1049314118409306112 (report)
- twitter.com — 1050118985210048512 (report)
- bleepingcomputer.com — The Week In Ransomware September 14Th 2018 Kraken Dharma And Matrix (report)
- twitter.com — 1039907030570598400 (report)