First Linux variant of Clop ransomware targeted universities, colleges but was flawed

The first Linux variant of the Clop ransomware was rife with issues that allowed researchers to create a decryptor tool for victims.

SentinelOne researcher Antonis Terefos said his team observed the first Clop (also stylized as Cl0p) ransomware variant targeting Linux systems on December 26. Clop has existed since about 2019, targeting large companies, financial institutions, primary schools and critical infrastructure across the world. After the group targeted several major South Korean companies like e-commerce giant E-Land …

cl0p clop clop ransomware colleges companies critical critical infrastructure december decryptor financial financial institutions infrastructure institutions large linux ransomware researcher researchers schools sentinelone systems targeting team tool universities world