Anubis Ransomware Adds File-Wiping Capability

Trend Micro researchers identified Anubis, an emerging RaaS active since December 2024, which pairs standard encryption and data theft with a destructive "wipe mode" that permanently erases files (using commands like vssadmin delete shadows and a /WIPEMODE parameter). The operator advertises flexible affiliate programs (including access monetization and data-only options), has listed seven victims across multiple industries and countries on its leak site, and typically gains initial access via spear-phishing, increasing pressure on victims and complicating recovery efforts.