• ERIC
• 16 Mar, 2021

Ransomware operators are evolving their tactics, techniques, and procedures (TTPs) to shift their targets and become more difficult to detect. As ransomware operators targeting large organizations have begun to move more strategically, using applications already installed on network systems (“living-off-the-land” techniques), off-the-shelf red team tools, and Windows utilities, their malicious behavior before encrypting files has become more difficult to distinguish from legitimate activity.
Read more...