Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
ransomed.yar/*
Ransomed.vc extortion group
*/
rule Ransomed_Note
{
meta:
author = "ransomware.live"
family = "ransomware.ransomed"
description = "Detects Ransomed.vc extortion note"
date = "2026-05-04"
severity = 7
score = 70
strings:
$s1 = "ransomed.vc" ascii nocase
$s2 = "Ransomed" ascii nocase
$s3 = "ransomed.onion" ascii nocase
condition:
any of them
}