[Intel]: https://blog.reversinglabs.com/blog/gwisinlocker-ransomware-targets-south-korean-industrial-and-pharmaceutical-companies

[timb-machine]

Area

Malware reports

Parent threat

Impact

Finding

https://blog.reversinglabs.com/blog/gwisinlocker-ransomware-targets-south-korean-industrial-and-pharmaceutical-companies

Industry reference

attack:T1486:Data Encrypted for Impact
region:South Korea
vertical:Pharmaceutical

Malware reference

Gwisin
wltm

Actor reference

No response

Component

Linux, VMware, Industrial

Scenario

Internal specialist services