Tag: yurei

3 Attack Reports | 0 Vulnerabilities

Attack reports

Analysis of Encryption Structure of Yurei Ransomware Go-based Builder

The Yurei ransomware group, first identified in September 2025, employs a typical ransomware operation model targeting corporate networks. Their attacks have affected Sri Lanka and Nigeria, focusing on transportation, IT, marketing, and food industries. The ransomware, developed in Go, uses ChaCha2…
ransomware
encryption
chacha20-poly1305
go-based
yurei
2025-11-14
darkweb
secp256k1-ecies
corporate networks
Published: November 14, 2025
Downloadable IOCs: 1

YUREI RANSOMWARE: THE DIGITAL GHOST

A sophisticated ransomware family called Yurei has emerged, targeting Windows systems with advanced encryption methods. It rapidly encrypts data using ChaCha20 and ECIES, appends .Yurei to files, and disables recovery options. The malware spreads via SMB shares, removable drives, and credential-bas…
ransomware
double-extortion
yurei
2025-10-04
Published: October 4, 2025
Downloadable IOCs: 0

Yurei the New Ransomware Group on the Scene

Yurei, a newly emerged ransomware group, targeted a Sri Lankan food manufacturing company on September 5, 2025. The group employs a double-extortion model, encrypting files and exfiltrating sensitive data. Check Point Research discovered that Yurei's ransomware is based on the open-source Prince-Ra…
ransomware
open-source
go
double-extortion
2025-09-12
morocco
satanlockv2
shadow copies
prince-ransomware
yurei
Published: September 12, 2025
Downloadable IOCs: 5
Click here to see more Attack Reports