Research: Egregor ransomware dismantled
Sophos researchers have taken a close look at the egregor ransomware. Is the ransomware the secret heir to Maze? The report “Egregor ransomware: Maze's heir apparent,” relies on several incidents Egregor has been involved in since September. Among other things, Sophos researchers found: Different tactics, techniques and procedures (TTPs) for attacks by different authors, which show how much criminal RaaS customers can vary their attack approaches and thus make defense protection more difficult. B. the use of the ChaCha and RSA encryption algorithms connections between Egregor and Sekhmet (Egregor is a derivative of ...
