RansomExx (Defray777)
Targeted enterprise ransomware
Source Attribution
- Origin
- MITRE
- Source
- Researchers
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Researchers · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered RansomExx (Defray777) first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
RansomExx targets enterprises with Windows and Linux encryption plus a leak site. (attributes recorded from Researchers).
Definition
RansomExx targets enterprises with Windows and Linux encryption plus a leak site.
Overview
RansomExx targets enterprises with Windows and Linux encryption plus a leak site.
Behavior
- Linux variant
- leak site
First Seen
2018-01
Target
Targeted enterprise ransomware
Malware Intelligence
Family: RansomExx (Defray777)
Techniques: T1486, T1567
Targets: Targeted enterprise ransomware
Behavior:
- Linux variant
- leak site
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.