Loading malware…
2 distinct techniques documented for this family, organized by ATT&CK tactic.
Interlock ransomware actors ... trying to uninstall Cisco Secure Endpoint (CSE) ... terminate security services and integrity checkers.
They took an unusually long time to exfiltrate and encrypt data while testing different exfiltration parameters.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.