Stay Ahead With Linux Security News

malwareransomwarelinux

RansomExx2: Latest Ransomware Written in Rust Aims at Linux Systems

IBM Security X-Force Threat Researchers have discovered a new variant of the RansomExx ransomware that has been rewritten in the Rust programming language, joining a growing trend of ransomware developers switching to the language. . Malware written in Rust often benefits from lower AV detection rates (compared to those written in more common languages) and this may have been the primary reason to use the language. For example, the sample analyzed in this report was not detected as malicious in the VirusTotal platform for at least 2 weeks after its initial submission. As of the time of writing, the new sample is still only detected by 14 out of the 60+ AV providers represented in the platform. RansomExx is operated by the DefrayX threat actor group (Hive0091), which is also known for the PyXie malware, Vatet loader, and Defray ransomware strains. The newly discovered ransomware version is named RansomExx2 according to strings found within the ransomware and is designed to run on the Linux operating system. The group has historically released both Linux and Windows versions of their ransomware, so it is likely that a Windows version is also in the works. . Uncover a new variant of RansomExx written in Rust, showcasing minimal detection rates and compatibility with Linux systems.. RansomExx, Rust Malware, Linux Ransomware. . LinuxSecurity.com Team

Nov 27, 2022 • LinuxSecurity.com Team Hacks/Cracks