DoppelPaymer is a ransomware that ask for hundreds of thousands of US dollars in ransom.

DoppelPaymer has at least eight variants that extended their feature set gradually, with the earliest one dating since April.


It behaves similar to BitPaymer. It also shares more than large portions of code.


DoppelPaymer uses threaded encryption process for a quicker operation. Once the user's files are encrypted, it displays a ransom note.

Community content is available under CC-BY-SA unless otherwise noted.