Skip to content
Ransomware group

donex

DoNex is a financially motivated ransomware group that first appeared in March 2024, with earliest known file samples dating to February 2024.

Profile source: Mallory opens in a new tab

donex

Family profile

DoNex is a financially motivated ransomware group that first appeared in March 2024, with earliest known file samples dating to February 2024. Reported targeting has included victims in the United States and Europe. Supporting reporting places DoNex among the new ransomware actors that emerged in 2024. Avast has released a decryptor for DoNex victims to restore encrypted files. Known alias in the provided content: donex.

Ransomware.live

Operational record

View group record ↗

MITRE ATT&CK

donex in ATT&CK

33 distinct techniques

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.