Anubis Ransomware Targets Global Victims with Wiper Functionality

Anubis is a Ransomware-as-a-Service observed since December 2024 that combines ECIES-based file encryption with an optional file‑wiping module and double-extortion tactics. The report maps Anubis behavior to MITRE ATT&CK (initial access via spearphishing, command/script execution, token manipulation, shadow copy deletion, service termination), provides sample hashes and process/service IoCs, and discusses prevention and simulation guidance for defenders.