Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "RIPlace – A new Evasion Technique that Let Ransomware to Encrypt Files Undetected" --> Research Paper [1] --> "... all antivirus products including Endpoint Detection and Response tested so far were completely blind to file operations using this technique, including encryption ..." VG Bernd [0] https://gbhackers.com/riplace-evasion-technique/ [1] https://www.nyotron.com/collateral/RIPlace-report_compressed-3.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler@itc.rwth-aachen.de https://www.itc.rwth-aachen.de