Anubis Ransomware Encrypts and Wipes Files, Making Recovery Impossible Even After Payment

#blueteam #purpleteam #infosec
#ransomware #anubis

https://thehackernews.com/2025/06/anubis-ransomware-encrypts-and-wipes.html

Just released: #swad 0.12

swad is the "Simple Web Authentication Daemon". It basically offers adding form + #cookie #authentication to your reverse proxy (designed for and tested with #nginx "auth_request"). I created it mainly to defend against #malicious_bots, so among other credential checker modules for "real" logins, it offers a proof-of-work mechanism for guest logins doing the same #crypto #challenge known from #Anubis.

swad is written in pure #C with minimal dependencies (#zlib, #OpenSSL or compatible, and optionally #PAM), and designed to work on any #POSIX system. It compiles to a small binary (200 - 300 kiB depending on compiler and target platform).

This release brings (among a few bugfixes) improvements to make swad fit for "heavy load" scenarios: There's a new option to balance the load across multiple service worker threads, so all cores can be fully utilized if necessary, and it now keeps lots of transient objects in pools for reuse, which helps to avoid memory fragmentation and ultimately results in lower overall memory consumption.

Read more about it, download the .tar.xz, build and install it .... here:

https://github.com/Zirias/swad

Only a short six days after the previous #iocaine release, I just tagged iocaine 2.3.0.

This release is primarily about fine tuning the scriptable request handler introduced in 2.2.0, but also comes with goodies for cases where the request handler is not in use (yet): there's now a built-in iocaine reload command, which allows one to load a new configuration into iocaine (as long as it is compatible: same socket bindings, and no change in metrics).

Also introduced in this release are a few small features required to transpile #Anubis bot policies (via Ammit) to iocaine's request handler system.

There are a number of new features and changes baking, so iocaine release frequency will continue to be weekly for the next few weeks at least.

Anubis Ransomware Lists Disneyland Paris as New Victim https://hackread.com/anubis-ransomware-lists-disneyland-paris-new-victim/ #Cybersecurity #CyberAttacks #CyberAttack #CyberCrime #Disneyland #Ransomware #Security #Anubis #France #Paris

Geht das jetzt auch bei #anubis schon los wie bei Klautflehr? Ich hab‘s satt …

Anubis Ransomware Lists Disneyland Paris as New Victim – Source:hackread.com https://ciso2ciso.com/anubis-ransomware-lists-disneyland-paris-as-new-victim-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #CyberAttacks #CyberAttack #CyberCrime #Disneyland #Ransomware #Hackread #security #Anubis #France #Paris

Just In: Anubis ransomware gang claims Disneyland Paris as its latest victim, calling it “the largest data leak in the history of Disneyland Park.”

More: https://hackread.com/anubis-ransomware-lists-disneyland-paris-new-victim/

https://forge.sourceware.org has been updated to the @forgejo v11.0.2 release.

https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.2.md

The forge now also uses #Anubis to keep the scraperbots out. It is fast and snappy again!

With #iocaine 2.2.0 released, I set out to write a small tool to transpile #Anubis bot policies into an iocaine request handler script: how hard could it be?

Turns out, it's not terribly hard!

Introducing: Ammit.

It's a bit of a hack, the code is something you really shouldn't look at if you have good taste, but it gets the job done. It can translate every policy in the Anubis repo, and the result even works!

I have yet to benchmark how fast the resulting script is - the default Anubis botPolicies.yaml ends up as a 44k roto script, significantly larger than nam-shub-of-enki (~18k).

#Anubis #ransomware adds wiper to destroy files beyond recovery

https://www.bleepingcomputer.com/news/security/anubis-ransomware-adds-wiper-to-destroy-files-beyond-recovery/

Anubis Ransomware Encrypts and Wipes Files, Making Recovery Impossible Even After Payment – Source:thehackernews.com https://ciso2ciso.com/anubis-ransomware-encrypts-and-wipes-files-making-recovery-impossible-even-after-payment-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #Anubis

New #Anubis #RaaS includes a #wiper module
https://securityaffairs.com/179044/malware/anubis-raas-now-includes-a-wiper-module.html
#securityaffairs #hacking #malwae

Anubis Ransomware Packs a Wiper to Permanently Delete Files https://www.securityweek.com/anubis-ransomware-packs-a-wiper-to-permanently-delete-files/ #Ransomware #Anubis #wiper

Anubis Ransomware Packs a Wiper to Permanently Delete Files https://www.securityweek.com/anubis-ransomware-packs-a-wiper-to-permanently-delete-files/ #Ransomware #Anubis #wiper

@cadey a fait une présentation d'#Anubis dans les lightning talks de #BSDCan ce soir. Elle sera bientôt visible en ligne sur le site de la conférence, si vous voulez en savoir plus sur cet outil qui protège l'instance mastodon de Tetaneutral.net contre les scrapers depuis quelques mois.
https://www.bsdcan.org
Encore merci pour cet ouil !

A stunning Anubis piece by Mathias Demongeot.

His interpretation of the scales of judgement are interesting, though somewhat ambiguous from reality.

Artist: Mathias Demongeot - https://alpaganimateur.tumblr.com/

Some people are really abusing the #Anubis . This website took over 20 seconds to open on my phone:

https://git.apiote.xyz/Bimba.git

20 seconds * 31kH = 620kH

Why??

This is getting out of hand. I agree that Anubis is a good measure for scrapers, but going crazy with the config is simply a **waste of everything** and would hurt the user too!

Seems now we have to make an extension to just close the tab if Anubis is running more than 5 seconds and is wasting phone battery!!