logo

VanHelsing ransomware emerges to put a stake through your Windows heart

ID: 63adeb2e-3569-5980-b201-fd3e680f1ee8

STIX ID: report--63adeb2e-3569-5980-b201-fd3e680f1ee8

Feed Name: The Register (Security)

Threat Score
70/100

Date Published: 2025-03-25

Date Updated: 2026-04-26

Author: Iain Thomson

...
...

Check Point researchers uncovered VanHelsing, a newly launched ransomware-as-a-service operation (announced March 7) that advertises cross-platform support but has so far been observed affecting Windows hosts; the RaaS uses an affiliate model (a $5,000 deposit for newcomers, an 80/20 payout split favoring affiliates), has extorted three victims with $500,000 demands, and is under active development with rapidly evolving samples and an operator control panel to streamline infections.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.