Vice Society: A Tale of Victim Data Exfiltration via PowerShell, aka Stealing off the Land
The Vice Society ransomware gang exfiltrated victim network data using a custom Microsoft PowerShell script. We dissect how each function of it works.
Custom-Branded Ransomware: The Vice Society Group and the Threat of Outsourced Development - SentinelOne
New PolyVice ransomware is likely in use by multiple threat actors building re-branded payloads with the same custom encryption scheme.
Custom-Branded Ransomware: The Vice Society Group and the Threat of Outsourced Development - SentinelOne
New PolyVice ransomware is likely in use by multiple threat actors building re-branded payloads with the same custom encryption scheme.