Babuk: Biting off More than they Could Chew by Aiming to Encrypt VM and *nix Systems?
ID: 966237b0-5af1-5302-bd73-a26cac5ea889
STIX ID: report--966237b0-5af1-5302-bd73-a26cac5ea889
Feed Name: McAfee Labs Blog
Threat Score
This McAfee report analyzes the Babuk ransomware family, noting affiliates developing cross-platform Go binaries targeting Linux/UNIX and ESXi systems, widespread coding errors that can prevent file recovery, and an observed shift from pure encryption to data theft and extortion; it also outlines common entry vectors (phishing, public-facing exploits, stolen/valid accounts), recommended detection and protection measures, and distribution of IoCs via vendor telemetry.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
