SETTRA ransomware

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 18, 2026
Last mentionedSep 18, 2026

Timeline

1 articles · newest first

New SETTRA Ransomware Uses MeshAgent RMM and BYOVD to Encrypt Windows Systems

New SETTRA ransomware operation abuses MeshAgent RMM for persistence, BYOVD via gdrv.sys, log clearing, and Windows recovery sabotage to encrypt systems.

GBHackersSep 18, 12:50 UTC · Sep 18, 2026RansomwareExploited2 · 1 read

Appears with

MeshAgentproduct · 1
SETTRAthreat actor · 1
Huntressvendor · 1
MOXFIVEvendor · 1

Entities are extracted by the model from each article. First seen Sep 18, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.