Muhstik

First seen

2019-04-01 00:00:00

Malware type

ransomware

Family

Malware family

Last IoC activity

2026-07-21 08:34:00

Profile updated

2026-07-07 16:06:12

Targeted industries: government-and-public-sector education-and-nonprofits healthcare-and-pharmaceutical technology-and-telecommunications

Context

Muhstik is a ransomware strain known for targeting publicly exposed web application frameworks and database management systems. It primarily spreads through botnets and exploits vulnerable instances to deploy its payload. Once executed, it encrypts files and appends its distinctive extension as part of its ransom demand.