Ransomware

HelloKitty

First seen: 2020-12 • Status: active

Currently Active Threat

HelloKitty is famous for attacking the company that made Cyberpunk 2077. They stole game source code.

Overview

HelloKitty notably attacked CD Projekt Red (Cyberpunk 2077 developer). It targets large organizations with double extortion.

Also Known As

FiveHands, DeathKitty

How It Spreads

  • VPN exploitation
  • Initial access

What It Does

  • File encryption
  • Source code theft
  • Gaming company targeting

Is your business exposed?

Target Platforms

Windows, Linux, VMware ESXi

Detection Tips

  • Monitor for HelloKitty indicators

MITRE ATT&CK Techniques

T1486, T1567

If You're Infected

  1. 1.

    Engage incident response

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required