Cybercriminals are using Snake ransomware to target business networks and encrypt all devices connected to them, according to Bleeping Computer.
Snake was discovered last week by MalwareHunterTeam. It removes a network device's Shadow Volume Copies and stops a variety of processes, including those related to SCADA systems, virtual machines, industrial control systems, remote management tools and network management software.
During a Snake attack, cybercriminals encrypt network device files (but skip those located in Windows system folders) and generate a ransom note. They also use Snake to encrypt entire networks rather than individual workstations.
In addition to Snake, cybercriminals recently have used Ryuk, LockerGoga and similar ransomware strains to launch cyberattacks. These ransomware strains enable cybercriminals to infiltrate networks, retrieve administrator credentials and encrypt files on network devices.
MSPs Fighting Ransomware: Basic First Steps
To get ahead of the ransomware threat, MSSP Alert and ChannelE2E have recommended that readers:
