Urausy

First seen
2012-12-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 14:34:14

Targeted industries: retail-and-hospitality financial-services government-and-public-sector

Targeted regions: country_code:us country_code:fr country_code:es

Context

Urausy is a ransomware family known for locking victim's screens and displaying fake law enforcement messages demanding payment. It has mainly targeted users in various countries through social engineering tactics.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Urausy_Auto (yara-rule)

Reports & references

  • malware.dontneedcoffee.com — Eyeglanceru (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Urausy (report)

External references