TLDR InfoSec · ATTACKS & VULNERABILITIES
ANUBIS RANSOMWARE ADDS WIPER TO DESTROY FILES BEYOND RECOVERY
Summary from the TLDR InfoSec newsletter
The Anubis ransomware-as-a-service operation added a new wiper module to its malware that destroys targeted files, making recovery impossible even if the ransom is paid. The new /WIPEMODE command requires key-based authentication and then erases all file contents, reducing the file size to 0 KB. This functionality presumably increased Anubis' pressure on victims during negotiations.