Skip to content
MalwareWiki

Malware

TargetCompany

aka Fargo · Mallox · Tohnichi

This ransomware uses a combination of different crypto algorithms (ChaCha20, AES-128, Curve25519).

TargetCompany, also known as Fargo, Mallox, Tohnichi, is a Windows malware family.

Background

This ransomware combines several cryptographic algorithms (ChaCha20, AES-128, Curve25519). Its activity traces back to mid-June 2021. Encrypted files receive an extension derived from the victim organization: .<target_company>. AVAST published a decryptor on 2022-02-07.

Source: Malpedia (Fraunhofer FKIE).