Dark Power Ransomware Abusing Vulnerable Dynamic-Link Libraries in Resolved API Flow

In a previously-published material, Heimdal® has analyzed the emergent Dark Power malware – a ransomware strain written in the NIM programming and capable leveraging advanced encryption techniques such as CTR for a better stranglehold on the victim’s device and, implicitly, the hosted data. Open-source threat intelligence feeds shed very little insight on the preferred vector […]

The post Dark Power Ransomware Abusing Vulnerable Dynamic-Link Libraries in Resolved API Flow appeared first on Heimdal Security Blog.

abusing advanced advanced encryption api ctr dark data device dynamic encryption flow forensics and threat hunting intelligence link malware nim power programming ransomware shed techniques threat threat intelligence victim vulnerable written