Salsa

First seen
2021-02-15 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 15:55:14

Targeted industries: healthcare-and-pharmaceutical financial-services manufacturing

Context

Salsa is a ransomware family that encrypts files on compromised systems and demands a ransom for decryption. It primarily targets industries such as healthcare, financial services, and manufacturing.

Detection coverage

  • 1 YARA rules

Detection rules

  • SIGNATURE_BASE_HKTL_NET_GUID_Salsa_Tools (yara-rule)