orion
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 14:01:44
Context
Jan13, 2026: We believe the group might be related to Babuk-Bjorka.
Detection coverage
- 1 YARA rules
Used by threat actors
- SolarWinds Compromise (campaign)
Detection rules
- DITEKSHEN_MALWARE_Win_Orion (yara-rule)
Reports & references
- ransomlook.io — Orion (report)