A new Ryuk ransomware variant with worm-like capabilities that allow it to spread to other devices on victims’ local networks has been discovered by the French national cyber-security agency. The new variant can still be blocked from infecting other hosts on the network by changing the password of the privileged domain account it uses for propagation to other hosts. Ryuk’s ability to mount and encrypt remote computers’ drives was previously observed by Advanced Intelligence CEO Vitali Kremez last year. An estimated $150 million has been made by Ryuk-as-a-service (RaaS) group.
Source: https://www.bleepingcomputer.com/news/security/ryuk-ransomware-now-self-spreads-to-other-windows-lan-devices/