WALocker is an emerging ransomware group targeting Southeast Asian government entities since 2025.
WALocker is an emerging ransomware group detected in 2025, targeting organizations in Southeast Asia and government entities. The group notably breached Myanmar's Union Civil Service Board, exposing data on approximately 200,000 government officials. Their primary TTPs involve data exfiltration followed by ransomware deployment. Defenders should monitor for anomalous file encryption activity and prioritize phishing-resistant authentication, especially in government sectors within the region.
WALocker is an emerging ransomware group that came to attention in 2025, targeting organizations in Southeast Asia and government entities, with a notable attack breaching Myanmar's Union Civil Service Board and exposing data on approximately 200,000 government officials.
WALocker primarily targets organizations in Southeast Asia and government entities.
Approximately 200,000 government officials' data was exposed.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.