Ransomwarecritical
New Memento ransomware uses password-protected WinRAR archives to block access to the files
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21972 | Unauthenticated RCE in VMware vCenter Server vSphere Client Plugin | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
From the original article
3 min read at securityaffairs.com
Memento ransomware group locks files inside WinRAR password-protected archives after having observed that its encryption process is blocked by security firms. In October, Sophos researchers have spotted the Memento ransomware that adopts a curious approach to block access to victims’ files.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.