Ziggy

First seen

2021-01-01 00:00:00

Malware type

ransomware

Profile updated

2026-07-07 15:51:35

Targeted industries: education-and-nonprofits healthcare-and-pharmaceutical professional-services technology-and-telecommunications

Context

Ziggy is a ransomware strain that encrypts files and demands a ransom in exchange for a decryption key. Initially observed in early 2021, Ziggy's operators released a decryptor following law enforcement pressure.

Detection coverage

• 1 YARA rules

Detection rules

• DITEKSHEN_MALWARE_Win_Ziggy (yara-rule)