New Cactus ransomware encrypts itself to evade antivirus

A new ransomware operation called Cactus has been exploiting vulnerabilities in VPN appliances for initial access to networks of “large commercial entities.” The Cactus ransomware operation has been active since at least March and is looking for big payouts from its victims.

How Cactus Ransomware is Evading Detection and Stealing Data

CyberWatch - May 10, 2023

Cactus Ransomware - Decryption, removal, and lost files recovery (updated)

Big Game Hunting is back despite decreasing Ransom Payment Amounts

Cactus Ransomware Employs Unique Encryption Techniques to Avoid Detection

Cactus Ransomware Infiltrates Networks by Exploiting VPN Flaws

New Cactus ransomware encrypts itself to evade antivirus

Antivirus and Ransomware - Cyber Security Informer

Picus Cyber Threat Intelligence Report May 2023: Top 10 MITRE ATT&CK Techniques

Cactus Ransomware Infiltrates Networks by Exploiting VPN Flaws

New Cactus ransomware encrypts itself to evade antivirus

New Wave of Ransomware Attacks and WordPress Vulnerability, Podcast

Ransomware Developers Turn to Intermittent Encryption to Evade Detection

The Week in Ransomware - May 12th 2023 - New Gangs Emerge