Warning Against Phobos Ransomware Distributed via Vulnerable RDP

AhnLab Security Emergency response Center (ASEC) has recently discovered the active distribution of the Phobos ransomware. Phobos is a variant known for sharing technical and operational similarities with the Dharma and CrySis ransomware. These ransomware strains typically target externally exposed Remote Desktop Protocol (RDP) services with vulnerable securities as attack vectors. Given the frequent occurrence of ransomware distribution that leverages these vulnerable RDPs as initial access points, administrators are advised to be cautious. [1] [2] [3]

1. Phobos Ransomware Overview …

ahnlab asec attack attack vectors center crysis desktop dharma distributed distribution emergency exposed malware analysis operational phobos ransomware protocol ransomware rdp remote desktop remote desktop protocol response securities security services sharing target technical vulnerable warning