New Ransomware Threat: Qilin and Warlock Target Organizations
A recent wave of ransomware attacks led by the Qilin and Warlock groups has raised significant concerns among cybersecurity experts. These attackers are using a method that disables security tools on infected systems, making it easier to execute their malicious payloads.
The Qilin group has been particularly active, linked to over 134 ransomware incidents in Japan last year, affecting various organizations. By infiltrating systems primarily through stolen credentials, they deploy a dangerous malware called “msimg32.dll,” which can terminate over 300 security drivers, leaving systems vulnerable.
The impact of these attacks can be severe, potentially leading to data loss and operational disruptions. To protect against such threats, organizations are advised to monitor driver installations closely, only allow signed drivers from trusted sources, and maintain up-to-date security software.
Risk Level: High – Organizations must act swiftly to bolster their defenses against these sophisticated attacks.
Source: View Original Report
