win.beast

Aliases: blacklockbit

Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:54:24

Targeted industries: financial-services healthcare-and-pharmaceutical manufacturing technology-and-telecommunications

Context

Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process starting and stopping, and geographic identification to avoid encryption in CIS countries.

Reports & references

  • cybereason.com — Threat Analysis Beast Ransomware (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Beast (report)

External references