Swid
- First seen
- 2019-05-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 14:33:16
Context
Swid is a type of ransomware that encrypts files on the infected system and demands a ransom payment from the victim. It is primarily distributed through phishing emails and exploits unsecured systems.
Detection coverage
- 1 YARA rules
Detection rules
- SIGNATURE_BASE_Apt_CN_Tetris_JS_Advanced_1 (yara-rule)
Reports & references
- imp0rtp3.wordpress.com — Tetris (report)
- malpedia.caad.fkie.fraunhofer.de — Js.Swid (report)