Skip to content

Malware

SiennaPurple

aka HolyLocker · H0lyGh0st

Ransomware used by threat actor group DEV-0530, attributed by MSTIC to North Korean origin.

SiennaPurple, also known as HolyLocker, H0lyGh0st, is a Windows malware family.

Background

A ransomware strain wielded by the DEV-0530 threat actor group, which MSTIC has linked to North Korea.


Source: Malpedia (Fraunhofer FKIE).