Yanluowang

Parsing : Enabled

Description

Ransomware.

External Analysis
https://blog.talosintelligence.com/2022/08/recent-cyber-attack.html
https://github.com/albertzsigovits/malware-notes/tree/master/Ransomware-Windows-Yanluowang
https://securelist.com/how-to-recover-files-encrypted-by-yanlouwang/106332/
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/yanluowang-targeted-ransomware
https://www.bleepingcomputer.com/news/security/free-decryptor-released-for-yanluowang-ransomware-victims/
https://www.symantec.broadcom.com/hubfs/SED/SED_Threat_Hunter_Reports_Alerts/SED_FY22Q2_SES_Ransomware-Threat-Landscape_WP.pdf
Urls
Screen
http://jukswsxbh3jsxuddvidrjdvwuohtsy4kxg2axbppiyclomt2qciyfoad.onion/
Screen
File servers
Screen
Chat servers
Screen

Posts

Date Title Description Screen
2022-10-31
шах и мат !! YANLUOWANG MATRIX CHATS HACKED @YANLUOWANGLEAKS TIME’S UP!! :D вам пиздец! @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS | @YANLUOWANGLEAKS | @YWL_LEAKS |
2022-08-18
Greetings to havi.com and tmsw.com
2022-08-18
Big data dump from various organizations Some of our customers was not payed to us for data decryption. So we publish some of his data.
2022-08-18
Walmart was encrypted Read our publication as soon as possible
2022-08-18
Cincinnati bell didn’t pay the ransom And we just publish some internal data
2022-08-18
Time's up!
2022-08-18
Hot news straight from Cisco Here we go again