Hive ransomware gang rapidly evolves with complex encryption, Rust code
"The new Hive variant uses string encryption that can make it more evasive," the researchers wrote, referring to the malware's executable."Strings reside in the .rdata section and are decrypted during runtime by XORing with constants. The constants that are used to decrypt the same string sometimes differ across samples, making them an unreliable basis for detection."
The data encryption mechanism in the variant also is significant, the researchers wrote. It uses a fresh set of algorithms: Elliptic Curve Diffie-Hellmann with Curve25519 and XChaCha20-Poly1305, which provides authenticated encryption with a ChaCha20 symmetric cipher."Instead of embedding an encrypted key in each file that it encrypts, it generates two sets of keys in memory, uses them to encrypt files, and then encrypts and writes the sets to the root of the drive it encrypts, both with .
Command-line parameters give attackers flexibility when running the payload by adding or removing functionality. MSTIC researchers found a range of parameters across different samples in the latest variant.
Belgique Dernières Nouvelles, Belgique Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
Eiffel Tower reportedly riddled with rust and in need of full repairsThe iconic structure is currently getting a lick of paint ahead of the 2024 Olympic Games, the 20th time it's been repainted.
Lire la suite »
Twitter sues India government over content takedown ordersLocal carriers are also upset with the laws, which they say will break encryption
Lire la suite »
AstraLocker ransomware closes doors to pursue cryptojackingWhy go through the hassle of demands and decryption when quietly mining is so much easier?
Lire la suite »
Dutch University profits from returned ransomware paymentDutch University retrieves Bitcoin ransomware payment and makes a profit
Lire la suite »
Eiffel Tower reportedly riddled with rust and in need of full repairsThe iconic structure is currently getting a lick of paint ahead of the 2024 Olympic Games, the 20th time it's been repainted.
Lire la suite »
Respite care: 'Burnt-out' mum says respite shortage affecting her familyBurnt out and not sleeping - a County Tyrone mum speaks out about how a reduction in respite services has affected her family as a lawyer warns some people are on the edge of placing their children into care ChildLawCentre
Lire la suite »