Protected

Malware type

ransomware

Family

Malware family

Profile updated

2026-07-07 16:17:21

Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector

Context

Protected is a ransomware known for encrypting data and demanding payment for decryption keys. It has targeted sectors such as finance, healthcare, and government with a focus on extortion for financial gain.

Detection coverage

• 2 YARA rules

Used by threat actors

• Velvet Ant Cisco Network Switches Exploit Activity (CVE-2024-20399) (campaign)

Detection rules

• DITEKSHEN_INDICATOR_TOOL_Backstab (yara-rule)
• DITEKSHEN_INDICATOR_TOOL_Pplblade (yara-rule)