Skip to content

Malware

DoppelPaymer

aka Pay OR Grief

Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files.

Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files. It is recognizable by its trademark file extension added to encrypted files: .doppeled. It also creates a note file named: ".how2decrypt.txt".


Family metadata imported from Malpedia (Fraunhofer FKIE).