Blog | G5 Cyber Security

Egregor ransomware print bombs printers with ransom notes

The Egregor ransomware is known to repeatedly print ransom notes from all available network and local printers after an attack. The attack on retail giant Cencosud was the first time we have seen this tactic in action. BleepingComputer has been aware of this tactic, but it wasn’t until last weekend that we saw it in action in action at the weekend. It is believed that it is not the Ransomware executable performing the printing of ransom notes. Instead, it is believed the attackers use a script at the end of an attack to print out ransom notes to all available printers.

Source: https://www.bleepingcomputer.com/news/security/egregor-ransomware-print-bombs-printers-with-ransom-notes/

Exit mobile version