Skip to content
Weaxor Ransomware Targets Windows and Linux Systems in China

Weaxor Ransomware Targets Windows and Linux Systems in China

First seen 27 Oct 2026, 02:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 08:13 UTC
  • •Weaxor ransomware targets Windows and Linux systems, affecting corporate databases.
  • •Attackers exploit weak passwords and system vulnerabilities to deploy ransomware.
  • •No reliable recovery method exists for encrypted data without the decryption key.

China's National Computer Virus Emergency Response Center reported multiple Weaxor ransomware attacks affecting both Windows and Linux systems. The ransomware, which has various variants, primarily targets corporate databases and office automation systems. Attackers gain access through weak passwords and system vulnerabilities, deploying the ransomware via PowerShell scripts and remote-control tools. The ransomware can encrypt files and steal login credentials, leading to significant data loss and financial damage. Currently, there is no reliable method to recover encrypted data without the decryption key. The center has urged small and medium-sized network operators to enhance their cybersecurity measures and conduct regular security checks. AI has been leveraged by cybercriminals to improve the sophistication and effectiveness of these attacks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-22
Weaxor ransomware attacks reported
China's cybersecurity center detected multiple Weaxor ransomware incidents targeting users, urging enhanced cybersecurity measures.
Globaltimes.Cn

More articles in this cluster (2)

Following this threat?

Track Weaxor in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What systems are affected by Weaxor ransomware?
Weaxor ransomware targets both Windows and Linux systems, particularly corporate databases and office automation systems.
How do attackers deploy Weaxor ransomware?
Attackers typically exploit weak passwords and vulnerabilities, deploying the ransomware through PowerShell scripts and remote-control tools.
What should organizations do to protect against Weaxor ransomware?
Organizations should strengthen their cybersecurity defenses, conduct regular security checks, and engage professional cybersecurity personnel.