Skip to content
brandefense.io
Request A Demo
RansomwareUnknown

Doppelpaymer

Doppelpaymer is a ransomware group, tracked by Brandefense. It targets organisations in the United States.

Also known as
  • Pay OR Grief
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

Countries · 1

Arsenal · Malware And Tools.

  • Process Hackertool

About Doppelpaymer.

Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files. It is recognizable by its trademark file extension added to encrypted files:.doppeled. It also creates a note file named: ".how2decrypt.txt".

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.