Lorenz
Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.
Victims
78
First Victim
2020-01-12
(est. attack date)
Discovery Date
2020-01-12
Last Seen
2023-12-11
Inactive Since
2yrs
more than
Avg Delay
18.2
days
Infostealer
31.6%
victims with domain
Countries
2
hit
Uptime
0.0% avg (30d)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Lorenz | No | 2026-08-22T08:08:58 |
lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 19
- Professional Services 12
- Retail & E-Commerce 9
- Technology 7
- Financial Services 5
Top 5 Countries
-
United States
2
-
Australia
2
Heatmap
Ransom Notes (2)
YARA Rules (1)
Victims (78)
