Skip to content
brandefense.io
Request A Demo
RansomwareFinancialIntermediate sophistication · Small team

Ronggolawe

Ronggolawe is a ransomware group with a financial motive, tracked by Brandefense. It targets the Government, and Construction and Real Estate sectors in Ecuador.

Also known as
  • Hotarus
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
Last seen
Jan 31, 2021
Record updated

Who They Target.

Sectors · 2
Countries · 1
Labelsransomware

About Ronggolawe.

Hotarus Corp is a Cybercrime Syndicate group primarily motivated by financial-gain. The group mainly targets financial institutions and government entities in Latin America and is assessed to operate with low sophistication. It is commonly associated with Ronggolawe PHP ransomware, web server compromises, and.htaccess modifications and is known for automated ransomware deployment via Google Cloud infrastructure against high-value targets.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.