Weyhro

Weyhro is a ransomware group/malware name referenced in Dragos reporting on industrial ransomware activity in 2025. In the provided content, Weyhro appears only as a low-volume or minimal-activity group: one mention states it registered one incident, and another places it among groups that each documented two incidents. No additional high-confidence technical details are provided in the source material regarding its malware family behavior, encryption methods, infection vectors, tooling, victimology, associated threat actors, targeted industries, or indicators of compromise. Based on the available content, the only supported characterization is that Weyhro was observed as a minor ransomware actor in 2025 reporting on incidents affecting industrial organizations.