WhiteBlackCrypt
Aliases: WARYLOOK
- Malware type
- ransomware, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 15:26:20
Targeted industries: financial-services government-and-public-sector
Context
WhiteBlackCrypt, also known as WARYLOOK, is a ransomware family that targets financial services and public sector entities, encrypting files to demand payment. It sometimes exhibits traits of a Trojan by installing additional malicious payloads.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Whiteblackcrypt_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Whiteblackcrypt (report)
- sebdraven.medium.com — Whisperkill Vs Whiteblackcrypt Un Petit Soucis De Fichiers 9C4Dcd013316 (report)
- checkmal.com — 3605 (report)