Payouts King Ransomware Artifacts File Creation

Ethan Andrews@eandrews

•updated Jun 5, 2026•3•0•4

Detects the creation of specific Payouts King ransomware artifacts, including its ransom note ('readme_locker.txt') and known encrypted file extensions ('.ZWIAAW') or temporary backup file extensions ('.esVnyj'). This rule focuses on file creation events indicative of a Payouts King ransomware infection.