RIPlace – A new Evasion Technique that Let Ransomware to Encrypt Files Undetected



RIPlace a new evasion technique that allows threat actors to encrypt files on Windows-based computers without being detected by anti-ransomware products.

Nyotron’s Security researchers discovered a new technique that leverages Microsoft Windows file system rename operations to stay undetected from security products,

RIPlace Evasion Technique
Attackers can use this RIPlace method to alter any files on the computers running with Windows XP or the new version of operating systems.

Read more…