RagnarLocker (Windows)
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 12:47:14
Targeted industries: energy-and-utilities financial-services manufacturing professional-services retail-and-hospitality
Targeted regions: country_code:us country_code:gb country_code:fr country_code:es country_code:it
Context
RagnarLocker is a sophisticated ransomware targeting large organizations across various industries, particularly in Europe and North America. Known for its double-extortion tactics, it not only encrypts files but also threatens to release stolen information if the ransom is not paid.
Reports & references
- CrowdStrike — Double Trouble Ransomware Data Leak Extortion Part 1 (report)
- analyst1.com — Ransom Mafia Analysis Of The Worlds First Ransomware Cartel (report)
- CrowdStrike — Report2021Gtr (report)
- intel471.com — Conti Ransomware Cooperation Maze Lockbit Ragnar Locker (report)
- Kaspersky — 99255 (report)
- Kaspersky — 106824 (report)
- news.sophos.com — Ragnar Locker Ransomware Deploys Virtual Machine To Dodge Security (report)
- trellix.com — Analysis And Protections For Ragnarlocker Ransomware (report)
- reversing.fun — Unpacking Ragnarlocker Via Emulation (report)
- reversing.fun — Unpacking Ragnarlocker Via Emulation (report)
- blog.blazeinfosec.com — Dissecting Ragnar Locker The Case Of Edp (report)
- blog.bushidotoken.net — Gamer Cheater Hacker Spy (report)
- blog.cyble.com — Deep Dive Into Ragnar Locker Ransomware Gang (report)
- blog.reversing.xyz — Unpacking Ragnarlocker Via Emulation (report)
- blog.reversing.xyz — Unpacking Ragnarlocker Via Emulation (report)
- cyware.com — Ragnar Locker Breached 52 Organizations And Counting Fbi Warns 0588D220 (report)
- id-ransomware.blogspot.com — Ragnarlocker Ransomware (report)
- krebsonsecurity.com — Ransomware Group Turns To Facebook Ads (report)
- news.sophos.com — Mtr Casebook Uncovering A Backdoor Implant In A Solarwinds Orion Server (report)
- seguranca-informatica.pt — Ragnar Locker Malware Analysis (report)
- twitter.com — 1403707430765273095 (report)
- acronis.com — Ragnar Locker (report)
- bleepingcomputer.com — Capcom Hit By Ragnar Locker Ransomware 1Tb Allegedly Stolen (report)
- bleepingcomputer.com — Fbi Ransomware Gang Breached 52 Us Critical Infrastructure Orgs (report)
- bleepingcomputer.com — Japanese Game Dev Capcom Hit By Cyberattack Business Impacted (report)