New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

A new Osiris ransomware strain has been identified, utilizing a custom POORTRY driver in a BYOVD attack to disable security software, and has been linked to previous INC ransomware activity. This sophisticated ransomware employs hybrid encryption and targets services and processes to maximize its impact, with observed attacks involving prior data exfiltration to cloud storage.

Edward Kiledjian @ekiledjian