TLDR InfoSec · ATTACKS & VULNERABILITIES

ANUBIS RANSOMWARE ADDS WIPER TO DESTROY FILES BEYOND RECOVERY

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

The Anubis ransomware-as-a-service operation added a new wiper module to its malware that destroys targeted files, making recovery impossible even if the ransom is paid. The new /WIPEMODE command requires key-based authentication and then erases all file contents, reducing the file size to 0 KB. This functionality presumably increased Anubis' pressure on victims during negotiations.