Sfile
Aliases: Escal, Morseop
- First seen
- 2020-02-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 15:11:55
Targeted industries: healthcare-and-pharmaceutical financial-services government-and-public-sector
Context
Sfile, also known as Escal or Morseop, is a ransomware family known for encrypting files on targeted systems to extort victims for payment. It has targeted various industries, including healthcare, financial services, and the public sector, employing encryption and extortion tactics typical of ransomware operations.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Sfile_Auto (yara-rule)
Reports & references
- sentinelone.com — From The Front Lines Another Rebrand Mindware And Sfile Ransomware Technical Breakdown (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Sfile (report)
- twitter.com — 1296856836944076802 (report)
- id-ransomware.blogspot.com — Sfile2 Ransomware (report)