Ransomware operators have spent years refining the art of locking files. Now, some are working harder to get those lockers to every reachable system first.
Microsoft’s recent warning of the Gentlemen ransomware revealed its operators using a self-propagating Go-based encryptor capable of moving laterally through compromised environments and deploying itself across additional systems.
“Modern ransomware is no longer just about encrypting files,” said Paul Reid, vice president of Adversary Research at AttackIQ. “The bigger risk is how quickly a single compromised machine can become a broader business disruption.”
In a technical breakdown of its operations, Microsoft said the Gentlemen Ransomwa...