Mallox
Ransomware Group Profile
Overview
This ransomware uses a combination of different crypto algorithms (ChaCha20, AES-128, Curve25519). The activity of this malware is dated to mid-June 2021. The extension of the encrypted files are set to the compromised company: .<target_company>
Dark Web Infrastructure (2)
wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onion
wtyafjyizleuw4yhepmdsrcfjwmtiysunos6ixchw3r5d7eeimw2rrid.onion
Associated Threat Actors (2)
Activity Timeline
First Seen2024
Last Seen2025
Leak Sites2
Quick Actions