File: Heavennhell_en.zip ... Apr 2026

If it has already been opened, disconnect the computer from the network immediately to prevent the spread of the infection.

The file is a specific archive associated with a ransomware campaign attributed to the threat actor group known as OldGremlin (also tracked as TinyGremlin). Context and Origin File: heavennhell_en.zip ...

This file was used as a malicious attachment in a observed around August 2022 . The attack specifically targeted Russian organizations (such as banks and manufacturing plants) by impersonating a prominent legal firm or industrial company. Technical Details of the Attack If it has already been opened, disconnect the