Health Care Organizations Warned of Venus Ransomware | Robinson+Cole Data Privacy + Security Insider

The Healthcare Sector Cybersecurity Coordination Center (IC3) recently published an analyst note to healthcare organizations providing information on a new ransomware variant called Venus (also known as GOODGAME).

According to IC3, threat actors “have been known to target publicly exposed remote desktop services to encrypt Windows devices.” The ransomware will then “attempt to terminate 39 processes associated with database servers and Microsoft Office applications” and “delete event logs, shadow copy volumes, and disable Data Execution Prevention at all times.” ‘help’ AES and RSA algorithms and will add the ‘.venus’ extension and a ‘goodgamer’ file marker.

[View source.]

Leave a Comment