⚔️ See how SentinelOne mitigates and rolls back Marlock ransomware. Marlock was first seen in the wild in September of 2021 and is an apparent evolution of Medusa Locker and the various branches of that family. As currently analyzed, it's functionally identical to recent samples of both Medusa and Huylock.
Upon infection, victims are instructed to connect to the attacker’s paymore portal (.onion) via TOR. Similar to its predecessors, it will attempt to shutdown / terminate any process which may stand in the way of the encryption process and will attempt to inhibit system recovery by deleting VSS / Shadowcopies (via WMIC)
~~~Subscribe to our channels:~~~
Website: [ Ссылка ]
LinkedIn: [ Ссылка ]...
Twitter: [ Ссылка ]
Facebook: [ Ссылка ]
Instagram: [ Ссылка ]
~~~~~~~~~~~~
SentinelOne is the only cybersecurity solution encompassing AI-powered prevention, detection, response, and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle. To learn more visit www.sentinelone.com.
