Ordinypt
Aliases: GermanWiper, HSDFSDCrypt
- First seen
- 2019-07-30 00:00:00
- Malware type
- ransomware, wiper
- Family
- Malware family
- Profile updated
- 2026-07-07 14:21:38
Targeted regions: country_code:de
Context
Ordinypt, also known as GermanWiper and HSDFSDCrypt, is a type of ransomware that attempts to disguise itself as a file-encrypting Trojan but instead irreversibly destroys victim data by overwriting files with random content. It predominantly targets German-speaking users.
Reports & references
- fortinet.com — The Increasing Wiper Malware Threat (report)
- CrowdStrike — The Anatomy Of Wiper Malware Part 1 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Ordinypt (report)
- bleepingcomputer.com — Ordinypt Ransomware Intentionally Destroys Files Currently Targeting Germany (report)
- dissectingmalwa.re — Tfw Ransomware Is Only Your Side Hustle (report)
- gdata.de — 30151 Ordinypt (report)
- carbonblack.com — Cb Threat Analysis Unit Technical Breakdown Germanwiper Ransomware (report)