10月 10, 2024
RansomHub Ransomware VS SentinelOne – Detection & Response
In this video, we show you how the SentinelOne Singularity XDR detects and mitigates RansomHub ransomware, a group that emerged in early February 2024 initially as a simple data leak site (DLS).
Key Highlights:
-Their focus mirrors other historically well-known operations such as REvil, ALPHV, and Play with regards to their core values and overall mission statements.
-They operate as a Ransomware-as-a-Service (RaaS), partnering with affiliates that work with a variety of ransomware families, including former-ALPHV and LockBit.
-RansomHub-native ransomware payloads target multiple platforms and environments.
-Direct RansomHub affiliates are provided access to build payloads for Windows and Linux along with targeted builds for ESXi and SFTP targeting.
-RansomHub works with other threat actors and groups to re-publish and re-broadcast the availability of victim data.
-Affiliates are provided with a feature-rich management-panel interface allowing for detailed control over their ransomware campaigns and the targets (victims) within.
-The panel interface includes the allocation of various credential harvesting and privilege escalation tools (e.g. secretsdump and SMBEXEC) along with modified tools designed to terminate/disable AV/EDR/XDR tools (e.g. TSDDKiller).
-Protective measures and recommendations for organizations to safeguard against such ransomware attacks, emphasizing the role of advanced cybersecurity solutions like SentinelOne Singularity.
Watch the video to learn technical details, operational tactics, and mitigation strategies surrounding RansomHub ransomware. Whether you're a cybersecurity professional, a business leader, or simply keen on understanding the dynamics of modern cyber threats, this video offers valuable insights into protecting your digital assets in an increasingly hostile cyber environment.
~Subscribe to our channels:~
Website: https://www.sentinelone.com/
LinkedIn: / sentinelone
Twitter: / sentinelone
Facebook: / sentinelone
Instagram: / sentinelsec
Threads: https://www.threads.net/@sentinelsec
関連リソース