Skip to content
brandefense.io
Request A Demo
RansomwareFinancialIntermediate sophistication

Cheers

Cheers is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector in China.

Also known as
  • Cheerscrypt
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
May 1, 2022
Record updated

Who They Target.

Sectors · 1
Countries · 1
Labelsransomware

About Cheers.

Cheers is a Linux-based ransomware group that emerged in 2022, built on leaked Babuk source code and specializing in attacks against VMware ESXi servers, running a double-extortion leak site with four documented victims.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.