New REvil Ransomware Version Automatically Logs Windows into Safe Mode

From heimdalsecurity.com

When it comes to ingenious hacking strategies and techniques, there’s no stopping REvil Ransomware.

Once more, the well-known ransomware has elevated its attack vector to change the victim’s login password in order to reboot the computer into Windows Safe Mode.

While malicious groups are always updating their attack methodology to counter security measures, the threat actors behind the REvil ransomware are particularly adept at honing their malware to make their attack campaigns more efficient.

Read more…