Known for its innovative strategies and approaches such as creating a website and developing ransomware operations, Maze ransomware operators have recently copied the Virtual Machine Trick of Ragnar Locker’s threat actors.
In an attempt to bypass endpoint protection, Maze used the Ragnar’s Virtual Machine trick to deliver payloads. Sophos also observed Maze’s ransomware operators adopted Ragnar’s trick to encrypt a PC within the virtual machine.
It is just the tip of the iceberg, as the Maze’s threat continues to expand. Its cartel of independent ransomware attacks is multiplying. With the advancements in its attacks, Maze is on its path to launch innovative attacks and disrupt the security landscape.