Unmasking Lorenz Ransomware: A Dive into Recent Tactics, Techniques and Procedures

Author: Zaid Baksh

In the ever-evolving landscape of cyber threats, ransomware remains a persistent menace, with groups like Lorenz actively exploiting vulnerabilities in small to medium businesses globally. Since early 2021, Lorenz has been employing double-extortion tactics, exfiltrating sensitive data before encrypting systems and threatening to sell or release it publicly unless a ransom is paid by a specified date.  

Recent investigations by NCC Group’s Digital Forensics and Incident Response (DFIR) Team in APAC have uncovered significant deviations in Lorenz’s …

author businesses cyber cyber threats data dive exploiting extortion lorenz lorenz ransomware malware analysis medium persistent procedures ransomware release sell sensitive sensitive data systems tactics techniques techniques and procedures threats vulnerabilities