Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper

Trend Research describes the emergence of Anubis, a 2025 RaaS that combines ECIES-based encryption with a destructive file-wiping capability (invoked via a /WIPEMODE parameter), documents observed TTPs (spear-phishing initial access, command-line execution, privilege escalation, shadow-copy deletion, service termination), lists victims across multiple countries and industries, and details affiliate monetization and IoCs; the report concludes with detection, mitigation recommendations, and hunting queries for defenders.