Malwarebytes has brought forward a report which has introduced a whole new problem for ransomware removal companies. ‘Sorebrect’ has come forward as ransomware that is completely fileless and Malwarebytes says it is the very first of its kind.
Malwarebytes’ report named ‘Under the Radar: The Future of Undetected Malware, observes four major ransomware attacks in 2018 that were completely fileless. These include SamSam, TrickBot, Emotet, and now Sorebrect. These attacks have accounted for about 35% of all of the attacks in 2018 and were also known to be 10 times more successful than the traditional form – in terms of ransomware removal.
The director of Malware Intelligence, Adam Kujawa said that GandCrab was the most popular kind of ransomware because of its capabilities, but Sorebrect was a completely new evolution of malware. The main way it infects victims is via exploited scripts or MS Office documents. It then resides into the memory of the device in question and hangs around long enough to encrypt everything.
The director also said that as ransomware removal methods for this threat aren’t full proof as yet, enterprises should adopt behavioral detection and move beyond their signature-based detection methods. Other than this, Malwarebytes also went on to suggest that these corporations should focus their strengths on email messages with the help of security products that disable threats and remove them entirely from the system.
All of this should be done before this form of malware makes any advances. Adam Kujawa was quoted to have said that we are still lucky that this form of malware hasn’t spread as yet, which means that cybercriminals out there haven’t started forming copycats of Sorebrect as yet and bigger splashes from these can be expected soon enough.
Gear up people!
