GhostLocker 2.0, an evolved version of the original ransomware, has been meticulously designed with plans for further iterations and enhancements
GhostSec and Stormous, infamous hacking groups have formed an alliance to introduce a new form of ransomware known as GhostLocker 2.0. This step taken by them, which has been causing a stir among cybersecurity experts, has resulted in a significant and widespread threat to businesses and organisations globally.
The primary modus operandi of this ransomware, GhostLocker 2.0, revolves around the utilisation of a sophisticated tactic known as double extortion, a method that significantly amplifies the potential impact of the attacks on targeted entities. Through this approach, the cybercriminals not only encrypt crucial files but also threaten to expose sensitive data unless the demanded ransom is paid, thereby adding an extra layer of pressure on the victims.
The collaboration between GhostSec and Stormous has further manifested in the establishment of an online platform named STMX_GhostLocker on the dark web. This platform serves as a hub for cybercriminal affiliates, providing them with access to a wide array of tools and resources necessary to execute twin ransomware attacks effectively. These attacks are meticulously orchestrated to target critical infrastructure and industries across various geographical locations, posing a significant threat to global cybersecurity.
GhostLocker 2.0, an evolved version of the original ransomware, has been meticulously designed with plans for further iterations and enhancements. It employs advanced encryption techniques to render files inaccessible to victims and establishes communication channels with a server located in Moscow, thereby complicating efforts to mitigate its impact and trace its origins.
GhostLocker 2.0, GhostSec has been actively utilising various sophisticated tools and techniques to compromise websites and infiltrate digital ecosystems. Notably, tools such as “GhostSec Deep Scan” and “GhostPresser” have been employed to exploit vulnerabilities within websites, particularly targeting platforms like WordPress, thus amplifying the reach and impact of their cyber operations.
The joint efforts of Stormous and GhostSec in launching the STMX_GhostLocker program underscore the severity and complexity of the threat posed by ransomware attacks in the contemporary digital landscape. The program offers a range of services and options for affiliates, including avenues for selling or leaking stolen data, with reported ransom amounts reaching staggering figures.
In response to the escalating threat posed by ransomware attacks like GhostLocker 2.0, cybersecurity experts and industry professionals stress the critical importance of implementing robust security measures and protocols. Measures such as multi-factor authentication, comprehensive malware protection, and proactive threat detection strategies are deemed essential to mitigate the risk and potential impact of such sophisticated cyber threats on businesses and organisations worldwide.
