Watch how SentinelOne detects PYSA ransomware. PYSA (aka Pysa Partners, Mespinoza) is a 'double-extortion' ransomware threat seen in the wild since early 2020. Like other recent ransomware gangs, the PYSA team maintains a blog to threaten their victims and leak sensitive data. One of the tactics used by PYSA is exfiltrating data before encrypting devices Data from victim hosts is exfiltrated before the encryption of devices.
The SentinelLabs team observed PYSA campaigns using tools like WinSCP to exfiltrate data. Earlier in 2021 we saw PYSA attacks against Educational institutions, primarily in the United States and the United Kingdom.
#ransomware #cybersecurity #infosec #PYSA #exploit #SentinelLabs
~~~Subscribe to our channels:~~~
Website: [ Ссылка ]
LinkedIn: [ Ссылка ]...
Twitter: [ Ссылка ]
Facebook: [ Ссылка ]
Instagram: [ Ссылка ]
~~~~~~~~~~~~
SentinelOne is the only cybersecurity solution encompassing AI-powered prevention, detection, response, and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle. To learn more visit www.sentinelone.com.
