Dark Power Ransomware rising

The Dark power ransomware was on the rise in January 2023. The ransomware gang behind the strain is a new threat actor.

The ransomware evades detection mechanism by disabling various services from security providers, production services (backups, SGBD, VSS) and launch its encryption routine.

The Dark Power gang is operating on a worldwide scale, with victims all over europe, central asia and the USA. Based on the data on the gang’s website, they have successfully targeted ten organizations.

SNS using the advanced AV option or the Breachfighter option offers a first layer of protection by blocking the file entering one’s network, based on its behavioral engine detection.

SES Evolution also detects and blocks the current Dark power ransomware with the default security policy without any updates.

References: