The Anatomy of Abyss Locker Ransomware Attack
Essential information
- Published
- 10/02/2025 20:51
- Modified
- 10/02/2025 20:58
- Tags
- 2025-02-10 abyss locker backdoor chisel defender esxi file impact locker patch persistence psexec ransomware rclone remcom restrict service smbexec ssh tunneling story strong velvet vulnerable
- Related entities
- 15 observables, 23 techniques (mitre), 1 malware
Description
Abyss Locker (AKA Abyss ransomware) is a relatively new threat group that emerged in 2023, specializing in swift and decisive intrusions designed to cripple victims with ransomware. Abyss Locker was active throughout 2024, causing multiple incidents investigated by Sygnia. However, no recent technical blogs provide detailed insights into the group’s modus operandi.