targetcompany
Aliases: Fargo, Mallox, Tohnichi
- First seen
- 2021-08-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-07-16 14:43:39
- Profile updated
- 2026-07-07 13:56:12
Targeted industries: healthcare-and-pharmaceutical financial-services manufacturing
Context
TargetCompany, also known as Fargo, Mallox, and Tohnichi, is a ransomware family primarily targeting various industries. It is known for encrypting victims' data and demanding ransoms for decryption keys.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Targetcompany_Auto (yara-rule)
Reports & references
- ransomlook.io — Targetcompany (report)
- news.sophos.com — Ooda X Ops Takes On Burgeoning Sql Server Attacks (report)
- blog.sekoia.io — Mallox Ransomware Affiliate Leverages Purecrypter In Microsoft Sql Exploitation Campaigns (report)
- trustwave.com — Proton66 Part 2 Compromised Wordpress Pages And Malware Campaigns (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Targetcompany (report)
- decoded.avast.io — Decrypted Targetcompany Ransomware (report)
- sangfor.com — New Threat Mallox Ransomware (report)
- labs.k7computing.com — Mallox Evading Amsi (report)
- blog.cyble.com — Mallox Ransomware Showing Signs Of Increased Activity (report)
- securityaffairs.co — Targetcompany Ransomware Decryptor (report)
- truesec.com — A Victim Of Mallox Ransomware How Truesec Csirt Fought Back (report)
- Palo Alto Unit 42 — Mallox Ransomware (report)
- asec.ahnlab.com — 39152 (report)
- id-ransomware.blogspot.com — Tohnichi Ransomware (report)
- Trend Micro — Xollam The Latest Face Of Targetcompany (report)
- bleepingcomputer.com — Free Decryptor Released For Targetcompany Ransomware Victims (report)