Grief
Ransomware Group Profile
Overview
Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files. It is recognizable by its trademark file extension added to encrypted files: .doppeled. It also creates a note file named: ".how2decrypt.txt".
Dark Web Infrastructure (2)
griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion
payorgz3j6hs2gj66nk6omfw65atgmqwzxqbbxnqi3bv2mlwgcirunad.onion
Associated Threat Actors (1)
Activity Timeline
First Seen2022
Last Seen2024
Leak Sites2
Quick Actions