{"id":174664,"date":"2023-10-24T16:43:30","date_gmt":"2023-10-24T21:43:30","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2023\/10\/meet-rhysida-a-new-ransomware-strain-that-deletes-itself"},"modified":"2023-10-24T16:43:30","modified_gmt":"2023-10-24T21:43:30","slug":"meet-rhysida-a-new-ransomware-strain-that-deletes-itself","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2023\/10\/meet-rhysida-a-new-ransomware-strain-that-deletes-itself","title":{"rendered":"Meet Rhysida, a New Ransomware Strain That Deletes Itself"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/meet-rhysida-a-new-ransomware-strain-that-deletes-itself.jpg\"><\/a><\/p>\n<p>Operating since last May, an emerging ransomware strain called Rhysida was deployed along with new stealer malware called Lumar for a potent new one-two punch against Brazil\u2019s popular PIX payment system users.<\/p>\n<p>Researchers from Kaspersky reported Rhysida is functioning as a <a href=\"https:\/\/www.darkreading.com\/attacks-breaches\/researchers-uncover-raas-affiliate-distributing-multiple-ransomware-strains\" target=\"_blank\">ransomware-as-a-service<\/a> (RaaS) operation with a demonstrated ability to quickly evolve.<\/p>\n<p>\u201c It stands out for its unique self-deletion mechanism and compatibility with pre-Windows 10 versions of Microsoft. Written in C++ and compiled with MinGW and shared libraries, Rhysida showcases sophistication in its design,\u201d Kaspersky said in its findings about the group. \u201cWhile relatively new, Rhysida faced initial configuration challenges with its onion server, revealing a group\u2019s rapid adaptation and learning curve.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Operating since last May, an emerging ransomware strain called Rhysida was deployed along with new stealer malware called Lumar for a potent new one-two punch against Brazil\u2019s popular PIX payment system users. Researchers from Kaspersky reported Rhysida is functioning as a ransomware-as-a-service (RaaS) operation with a demonstrated ability to quickly evolve. \u201c It stands out [\u2026]<\/p>\n","protected":false},"author":662,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-174664","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/174664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/662"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=174664"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/174664\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=174664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=174664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=174664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}