SentinelOne Vs. Dark Angels Team Ransomware – Mitigation and Rollback

See how SentinelOne mitigates and rolls back Dark Angels Team Ransomware. In May 2022, researchers found another Babuk-derivative that behaves very similarly to HelloXD called « Dark Angels » (aka DarkAngels). Early reports on Dark Angels suggest that each ransomware sample is targeted specifically for a given organization, not unlike Mindware and SFile, which we’ve reported on previously.

Dark Angels’ victims are instructed to communicate with the threat actor via TOR-based chat portal and are given the (now) usual warning about not attempting to contact law enforcement, engage recovery teams or hire negotiators.

Learn more from the SentinelOne Blog: https://s1.ai/lsw

#darkangels #cybersecurity #ransomware #babuk