New Ransomware Threat Adds File-Wiping Destruction to Encryption Attacks

Researchers have identified a new RaaS called Anubis that augments the double-extortion model with a custom file wiper (WIPEMODE) enabling attackers to permanently destroy data in addition to stealing and encrypting it; the malware is delivered via phishing, command-line execution and privilege escalation, and defenders are advised to maintain secure offline/off-site backups, limit admin privileges, and keep security controls updated.