Ransomware Roundup: 05.07.22

The report highlights renewed activity from high-profile ransomware actors and emergent techniques: REvil appears to be reconstituting, AvosLocker variants abuse a legitimate Avast kernel driver to disable endpoint protections, the FBI warns of BlackCat/ALPHV targeting at least 60 entities and leveraging Rust, and a researcher disclosed a method to hijack DLL execution to block ransomware encryption. These developments indicate active, evolving ransomware campaigns that employ kernel-level evasion and opportunistic reuse of legitimate drivers to defeat defenses.