Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"RIPlace – A new Evasion Technique that Let Ransomware to Encrypt Files Undetected"

--> Research Paper [1]

--> "... all antivirus products including Endpoint Detection and Response tested so far were completely blind to file operations using this technique, including encryption ..."

VG

Bernd

[0] https://gbhackers.com/riplace-evasion-technique/

[1] https://www.nyotron.com/collateral/RIPlace-report_compressed-3.pdf