{"id":23848,"date":"2025-08-21T10:00:00","date_gmt":"2025-08-21T08:00:00","guid":{"rendered":"https:\/\/defenderbox.de\/?p=23848"},"modified":"2026-03-11T18:00:42","modified_gmt":"2026-03-11T17:00:42","slug":"anubis","status":"publish","type":"post","link":"https:\/\/defenderbox.de\/en\/anubis\/","title":{"rendered":"Anubis - dangerous ransomware strain"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

When ransomware no longer allows negotiations<\/span><\/h2>\n

A relatively new strain of ransomware called Anubis<\/strong>\u00a0is currently causing concern among cyber security researchers - and not without reason: the malware not only combines classic encryption mechanisms, but also has an integrated deletion function that irretrievably destroys data.<\/p>\n

Double threat<\/span><\/h3>\n

While most ransomware attacks are based on blackmail - with the promise of releasing access to the data once a ransom has been paid - Anubis goes one step further:\u00a0In \"wipe mode\", files are deleted instead of encrypted.<\/span><\/p>\n

The technique behind it is as perfidious as it is effective: although the file names and endings are retained, the content is completely removed and reduced to 0 KB.<\/p>\n

A psychologically effective method to put victims under additional pressure - because they can still see their folder structures, but the content is gone. Forever.<\/p>\n

Who is affected?<\/span><\/h3>\n

Anubis was first discovered in December 2024. The attacks are primarily aimed at companies in the following sectors<\/p>\n