See how SentinelOne protects against Hive Ransomware. Hive is a recently discovered ransomware family. Earlier this month, the criminal group leaked data from Altus Group, a software company focused on the commercial real estate industry. The threat will attempt to inhibit system recovery by removing Volume Shadow Copies. VSS removal and timeout (execution delays) functions are handled via two .BAT files dropped upon launch (shadow.bat and hive.bat). Hive’s execution is both rapid and noisey. Full drive encryption can be achieved within minutes. That said, visible cmd-windows and excessive timeout calls make it far from ‘stealth’. Victims are instructed to visit the Hive payment / support portal via TOR.

#ransomware #cybersecurity #threathunting #threatintelligence #IT #infosec

~~~Subscribe to our channels:~~~
Website: [ Ссылка ]
LinkedIn: [ Ссылка ]...
Twitter: [ Ссылка ]
Facebook: [ Ссылка ]
Instagram: [ Ссылка ]
~~~~~~~~~~~~
SentinelOne is the only cybersecurity solution encompassing AI-powered prevention, detection, response, and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle. To learn more visit www.sentinelone.com.

свернуть