Anubis ransomware deploys Lindnor backdoor in US attack
Anubis ransomware operators broke into a US organization deploying custom Lindnor backdoor and 13 security-killing tools including vulnerable drivers.
70
Malware
Anubis
- Mentions · 7d2
- Mentions · 30d2
- All mentions4
- First seenSep 24, 2026
- Last mentioned2d ago
Timeline
4 articles · newest firstHawkmoth deploys custom Lindnor backdoor in Anubis ransomware attack
U.S. organization hit with Anubis ransomware via Lindnor backdoor on SQL servers; security tools disabled but encryption blocked.
70
Microsoft Finds Ransomware Group Using Same Attack Blueprint Across Multiple Malware Families
Microsoft says affiliate Storm-2570 reused one playbook across Qilin, DragonForce, Anubis, and BERT.
74
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Microsoft Threat Intelligence has observed Storm-2570, a ransomware affiliate linked to multiple ransomware payloads, using consistent tradecraft across deployments.
70
Appears with
- Lindnormalware · 2
- BERTmalware · 2
- DragonForcemalware · 2
- Hawkmoththreat actor · 2
- Storm-2570threat actor · 2
- Symantecvendor · 2
- Qilinmalware · 2
- financial servicesorganization · 1
- healthcarevictim · 1
- information technology (IT)victim · 1
- ransomware affiliateproduct · 1
- ngrokproduct · 1
- US organizationvictim · 1
- government agenciesorganization · 1
- energyorganization · 1
- U.S. organizationvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.