Security News > 2020 > January > New 5ss5c Ransomware Likely Readied to Replace Satan
2020-01-15 15:48
The threat actor or group behind the Satan ransomware - and probably DBGer and Lucky and possibly Iron - seems to be engaged in a new version or evolution of Satan: 5ss5c.
There are several clues within 5ss5c linking the ransomware to Satan.
Satan had been regularly developed and updated with new functionalities and techniques - but this process stopped around the summer of 2019.
Similarities with Satan include the launch process via a downloader, the use of EternalBlue for spreading, several Satan artefacts, and tactics, techniques and procedures that align with both Satan and DBGer.
Satan was available as ransomware-as-a-service, and it is possible that the new 5ss5c is taking the same route.