RanRan
Aliases: ZXZ
- First seen
- 2017-01-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:39:13
Targeted industries: government-and-public-sector
Targeted regions: country_code:sa
Context
RanRan is a ransomware known for targeting government institutions, particularly in the Middle East. It encrypts files and demands a ransom in exchange for a decryption key.
Reports & references
- github.com — Ranran Decryption (report)
- researchcenter.paloaltonetworks.com — Unit42 Targeted Ransomware Attacks Middle Eastern Government Organizations Political Purposes (report)
- bleepingcomputer.com — New Ranran Ransomware Uses Encryption Tiers Political Messages (report)