Ransomware group has borrowed a successful technique from another gang which makes it harder to spot when malware is being spread.
September 17, 2020 By Danny Palmer
One of the most dangerous cyber criminal ransomware operations around today has deployed a new tactic to help attacks stay undetected until it's too late, one most likely borrowed from another ransomware group.
What makes Maze so dangerous is that as well as demanding a six-figure – or higher – sum of bitcoin in exchange for the decryption key, they threaten to publish stolen internal data if their extortion demands aren't met.
The group is already skilled at infiltrating the networks of organisations but now they've adopted a new tactic which makes it even harder for victims to detect that there are outsiders on the network by using virtual machines to distribute the ransomware payload.