Memento Ransomware: data is encrypted or locked
Sophos discovers new ransomware Memento: it locks files in a password-protected archive if it cannot encrypt the data. Forensic analysis by SophosLabs provides detailed insights into the new approach. Sophos has released details of a new ransomware from a group called Memento. The study "New Ransomware Actor Uses Password Protected Archives to Bypass Encryption Protection" describes the attack that locks files in a password-protected archive if the ransomware Memento cannot encrypt the target data. Memento has alternate attack options "Human-directed ransomware attacks are rarely straightforward and linear," says Sean ...