In this video demonstration, we show how the SentinelOne Singularity XDR Platform protects against LuckBit ransomware. LuckBit ransomware emerged in October of 2023. The threat actors behind LuckBit have been observed requesting payment in terms of equivalency to the Malaysian Ringgit (MYR), with campaigns observed requesting up to the equivalent of 20 Million MYR, paid in BTC (Bitcoin). This currently works out to approximately 158 BTC or $4.2 million.

Victims are instructed to only contact the attacker after making the requested ransom payment. The ransom note contains the relevant contact details including an email address and a TOR-based web site/victim portal. LuckBit payloads will attempt to inhibit system recovery by removing Volume Shadow Copies (VSS) via VSSADMIN.EXE. Infected systems are modified to display the ransom note upon every boot or startup.

The SentinelOne Singularity XDR Platform can return systems to their original state.

~Subscribe to our channels:~
Website: [ Ссылка ]
LinkedIn: [ Ссылка ]
Twitter: [ Ссылка ]
Facebook: [ Ссылка ]
Instagram: [ Ссылка ]
Threads: [ Ссылка ]
~~~~~~~~~~~~
SentinelOne is the only cybersecurity solution encompassing AI-powered prevention, detection, response, and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle. To learn more visit www.sentinelone.com.

endpoint #ransomwareprotection #ransomware #LuckBitransomware #sentinelone

свернуть