LIUSHEN Ransomware Mass File Encryption via .Liushen Extension

Subhankar H@Andrewsec57

•updated Jul 8, 2026•1•0•8

Detects mass file renaming activities involving the '.Liushen' extension, commonly associated with the LIUSHEN ransomware behavior where files are appended with this extension after being encrypted.