The CYFIRMA research has identified a new ransomware variant named LithiumWare, showcasing advanced capabilities designed to disrupt, encrypt, and steal.
Key Features of LithiumWare:
- Data Theft: Exhibits activities indicative of stealing personal data, including detecting crypto-addresses.
- Persistence: Creates files in the startup directory, manipulates desktop.ini for cloaking, and executes services like svchost.exe.
- Reconnaissance: Reads machine GUIDs, security settings, and environment variables to tailor attacks.
- Misuse of Legitimate Software: Drops and executes files via trusted programs like msedge.exe and WinRAR.exe to evade detection.
Link to the Research Report: LithiumWare Ransomware - CYFIRMA
#Cybersecurity #Ransomware #LithiumWare #ThreatIntelligence #MalwareDetection #ExternalThreatLandscapeManagement #ETLM #CYFIRMA
https://www.cyfirma.com/
