Skip to content
MalwareWiki

Malware

Nefilim

aka Nephilim

According to Vitali Kremez and Michael Gillespie, this ransomware shares much code with Nemty 2.5.

Nefilim, also known as Nephilim, is a Windows malware family.

Background

Vitali Kremez and Michael Gillespie note that this ransomware overlaps heavily in code with Nemty 2.5. One distinction is that the RaaS component was dropped in favor of handling payments through email. It encrypts using AES-128, which is in turn secured with RSA2048.

Source: Malpedia (Fraunhofer FKIE).