Payloadbin
- First seen
- 2021-05-30 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:45:41
Targeted industries: financial-services healthcare-and-pharmaceutical technology-and-telecommunications
Context
Payloadbin is a ransomware group known for encrypting victims' data and demanding ransom in cryptocurrency, often leveraging double extortion tactics by threatening to release stolen data if the ransom is not paid.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Payloadbin_Auto (yara-rule)
Reports & references
- bleepingcomputer.com — New Evil Corp Ransomware Mimics Payloadbin Gang To Evade Us Sanctions (report)
- cyberintelmag.com — Payloadbin Ransomware Attributed To Evil Corp (report)
- ransomlook.io — Payloadbin (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Payloadbin (report)