01flip: Multi-Platform Ransomware Written in Rust
ID: 8f4bfefa-382e-5613-a6f0-2a1031dcf2e2
STIX ID: report--8f4bfefa-382e-5613-a6f0-2a1031dcf2e2
Feed Name: Palo Alto Networks Unit 42
Threat Score
In June 2025 Unit42 identified 01flip, a newly observed, Rust-written, multi-platform ransomware used by financially motivated actors (CL-CRI-1036) to encrypt Windows and Linux systems in the Asia‑Pacific region; the report provides technical analysis, IOCs (sample hashes and behavior), observed use of the Sliver framework and exploitation attempts against outdated internet-facing software, and mitigation guidance for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.