Iranian State-Sponsored Hacking Group Nemesis Kitten Encrypts Windows Systems Using BitLocker

According to Microsoft, state-sponsored hacking group DEV-0270 (also known as Nemesis Kitten) is actively abusing recently found vulnerabilities and uses living-off-the-land binaries (LOLBINs) in attacks. The group uses BitLocker to encrypt files on Windows systems and DiskCryptor for workstations. The time to ransom is usually around 2 days, with ransom sums reaching 8,000$ for a decryption key. Read more...