New VECT 2.0 Ransomware Targets Multi-Platform Systems
ID: 4a1573d6-38ec-53a0-844d-56eb31995674
STIX ID: report--4a1573d6-38ec-53a0-844d-56eb31995674
Feed Name: Cyber Press
Threat Score
VECT 2.0 is a multi-platform ransomware-as-a-service whose flawed ChaCha20-IETF implementation overwrites nonces for files over 128 KB, permanently destroying large files instead of producing recoverable ciphertext; it targets Windows, Linux, and VMware ESXi, spreads laterally, and has established partnerships (BreachForums, TeamPCP) that expand its operational reach and supply-chain access, making robust backup isolation and endpoint monitoring critical.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.