Wassonite is a ransomware group that first emerged in 2018 and was active until at least October 2019. This group is assessed with high confidence to be of North Korean origin. Their primary motivation is financial gain, achieved through the exfiltration of sensitive data and subsequent encryption of affected systems to demand ransom. Wassonite is characterized by its use of persistent intrusion methods and sophisticated encryption algorithms in its operations.