Ransomware Yanluowang

Yanlouwang Ransomware is malware that is in development, yet it is already causing concern for businesses. The group was discovered in August 2021 in one of its attacks. Yanlouwang is a name for a Chinese entity, known as the god of the underworld, Yanluo Wang. Although the name is derived from an Asian culture, there is no information on where the ransomware originated.

Despite being in testing stages, the ransomware was able to break into the systems of large institutions such as Walmart. In a post on the group’s leak site, they claim to have accessed about 40,000 to 50,000 Walmart computers. The hackers asked for $55 million to hand over the files, but the company ignored the negotiation and resorted to other methods to recover the data. Walmart denies such an attack.

The ransomware is not interested in stealing the victims’ files, but only in encrypting them using the RSA-1024 encryption algorithm. When systems are infected, all files are given the extension “.yanluowang” and if ransom demands are not met, threats of DDoS (Distributed Denial of Service) attacks are carried out.

According to Kaspersky, the countries that suffered most attacks from the group were the US and Turkey, both responsible for 20% of the victims, and Brazil with 16% of the targets. The ransomware operates in these countries targeting organizations in the finance, manufacturing, IT, consulting, and engineering sectors.

Recover files encrypted by ransomware Yanluowang

Digital Recovery is a company specialized in recovering data encrypted by ransomware. We have been working in the recovery area for over 23 years facing the most diverse scenarios and challenges in the market.

Together with our team of experts we develop unique solutions that allow adaptation to each case we solve. Including a fully remote recovery mode, speeding up the process and making our services more efficient.

In extreme occurrences, we offer an emergency mode solution, which provides an exclusive service with a team to perform the service 24 hours a day.

And as a company, we know the importance of data confidentiality. With this in mind, we developed our NDA (Non-Disclosure Agreement).

Contact us and request a diagnosis right now, we have a team available to assist you 24×7.

We are always online

Please fill out the form, or select your preferred contact method. We will contact you to start recovering your files.

Latest insights from our experts

Recuperar memoria flash

What is Flash Memory?

Since its invention in the 1980s, Flash memory has revolutionized digital data storage. Essential for mobile devices, digital cameras, storage units and more, it combines


Through unique technologies Digital Recovery can bring back encrypted data on any storage device, offering remote solutions anywhere in the world.

Discover the invisible vulnerabilities in your IT – with the 4D Pentest from Digital Recovery