Skip to content

Malware

SiennaBlue

aka HolyLocker · H0lyGh0st

Ransomware used by threat actor group DEV-0530, attributed by MSTIC to North Korean origin.

SiennaBlue, also known as HolyLocker, H0lyGh0st, is a Windows malware family.

Background

Ransomware wielded by the threat actor group DEV-0530, which MSTIC traces to North Korea.


Source: Malpedia (Fraunhofer FKIE).