Security News > 2022 > March > LockBit beats REvil and Ryuk in Splunk’s ransomware encryption speed test

LockBit beats REvil and Ryuk in Splunk's ransomware encryption speed test.

Splunk researchers put 10 ransomware variants to a speed test to help network defenders improve their security strategies.

"We created a modified version of the Splunk Attack Range lab environment to execute 10 samples of each of the 10 ransomware variants on four hosts. Two hosts ran the operating system Windows 10 and the other two hosts ran Windows Server 2019. We assigned each host 'high' or 'mid' level resources to test how ransomware would behave with different processors, memory, and hard drive configurations. We enabled Windows logging on each host to collect, synthesize, and analyze the data in Splunk."

Splunk analysts also wanted to quantify the encryption speed for each individual sample as well as the median speed and duration across the families of malware.

In the analysis of the test, the researchers noted that "There was no direct correlation between a sample using a larger amount of system resources with a faster encryption speed. Some ransomware families performed worse, or even crashed, when deployed on the faster test systems."

Also See Share: LockBit beats REvil and Ryuk in Splunk's ransomware encryption speed test.

News URL

https://www.techrepublic.com/article/lockbit-beats-revil-and-ryuk-in-splunks-ransomware-encryption-speed-test/