{"id":7551,"date":"2021-04-16T20:38:37","date_gmt":"2021-04-17T03:38:37","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?p=7551"},"modified":"2023-04-05T12:40:31","modified_gmt":"2023-04-05T19:40:31","slug":"all-about-ryuk-ransomware","status":"publish","type":"post","link":"https:\/\/10.42.32.162\/articles\/all-about-ryuk-ransomware\/","title":{"rendered":"All About Ryuk Ransomware"},"content":{"rendered":"
\n

Did you know that in 2020 Ryuk ransomware targeted 67.3 million targets?<\/span><\/p>\n<\/blockquote>\n

What is Ryuk?<\/h2>\n

Ryuk is a crypto-ransomware strain that encrypts access to a system, device or a file and demands ransom to release it. Ryuk is unleashed on target assets through malware, notably TrickBot and is used to gain access to a system through remote desktop services.<\/p>\n

Ryuk typically targets vulnerable organizations or critical entities like hospitals where the probability of ransom payout is high. And since the ransom is their primary motive they demand more than any other ransomware threat group. The ransom amount oscillates between $100,00 to $500,00 in bitcoins and they are very successful in their campaigns because they select high-profile targets for whom data and information is sacrosanct and hence the chance of the payout is high.<\/p>\n

Ryuk debuted in mid-August 2018 and was being operated by Wizard Spider, a sophisticated group that targeted large organizations with critical and sensitive data for high ransom payouts.<\/p>\n

The creation of Ryuk is generally attributed to a cybercriminal group known as CryptoTech who were selling Hermes 2.1 in underground forums but there are researchers who believe that it was created by the Russian cyber criminal cartel.<\/p>\n

New Variant<\/h2>\n

Researchers noted that since July 2020, a new variant called Conti has been making the rounds. The consensus among security experts is that Ryuk threat actors have rebranded themselves as Conti ransomware.<\/p>\n

Conti is a private Ransomware as a Service (RaaS) that encrypts files and delivers the ransom note.<\/p>\n

The converging similarities in Ryuk and Conti can be seen through features –<\/p>\n