Ryuk Ransomware Playbook

Ransomware is a very simple but invasive malicious software that affects both home users and organizations such as government departments, courts, hospitals, universities, large enterprises, small medium enterprises, or even non-government organizations (NGOs). Since 2013, ransomware has become a key financial resource of choice for cybercriminal organizations. 

This ransomware playbook is intended to be used if your organization is infected with Ryuk ransomware, typically deployed by the combination of an Emotet injection, and Trickbot for continued persistence. Blackpanda has provided a special checklist under the Appendix section to help you handle the incident quickly and efficiently .

Copyright © 2021 Blackpanda.
All Rights Reserved.


Room 33 

Entrepreneurship Center

IT Street, Level 3, Cyberport 3

100 Cyberport Rd

Hong Kong


D1-U3A-6 Solaris Dutamas

Jalan Dutamas 1

50480 Kuala Lumpur


6 Raffles Quay
Singapore (048580)


301, 2-7-18

Nishiazabu Minato-ku

Tokyo 106-0031


Penthouse, World Plaza Bldg.

5th Ave., Bonifacio Global City

Taguig City 1634

  • LinkedIn
  • Facebook