Lorenz
Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.
Threat level
MEDIUM
Get an alert if one of your domains is named on a ransomware leak site.
Known infrastructure
The following Tor hidden services have been associated with this group:
Lorenz
These sites are malicious. Open them only from an isolated environment.
Check if you’re affected
Look up your domain to see whether it appears on Lorenz’s victim list.
risk score · threat categories · sources · age · confidence — in one request