According to Microsoft, state-sponsored hacking group DEV-0270 (also known as Nemesis Kitten) is actively abusing recently found vulnerabilities and uses living-off-the-land binaries (LOLBINs) in attacks.
The group uses BitLocker to encrypt files on Windows systems and DiskCryptor for workstations.
The time to ransom is usually around 2 days, with ransom sums reaching 8,000$ for a decryption key.
