Mai 4, 2023
SentinelOne Demo: SentinelOne VS Dark Power Ransomware – Prevention
In this video demo, we showcase how SentinelOne's XDR technology protects against Dark Power ransomware. Dark Power first emerged in early 2023. The ransomware group engages in multi-extortion, threatening to release victim's data upon failure to comply with attacker demands. Dark Power is written in Nim, which is a multi-platform language.
Dark Power also has standard ransomware features such as VSS removal. Upon infection, a multi-page PDF file is dropped with victim instructions in in lieu of a traditional ransom note. Infected victims are instructed on how to engage the attacker via qTox, along with their .onion (blog address). In addition, the ransomware will attempt to terminate any processes that may inhibit the encryption of the device, a measure coded into the ransomware. The malware also clears out Windows event logs in an attempt to obfuscate its presence.
Dark Power requires victims to pay their extortion fees in XMR (Monero). Early campaigns featured ransom amounts of $10,000 USD.
Experience the power of SentinelOne's XDR solution and witness first-hand its effectiveness in combating the Dark Power ransomware. Subscribe to our channels for more in-depth analysis and real-life examples from the forefront of cybersecurity.
Weiterführende Ressourcen
Resource
SentinelOne PartnerOne - America's 2025
⛳️ Last week in Pebble Beach the America's best cybersecurity partners came together for our annual PartnerOne summit. Check out…
View Asset
Resource
Just a Sec: Cybersecurity Unfiltered—Fast, Frank, and From the Front Lines
Welcome to the first-ever Just A Sec, a no-holds-barred, quick-fire monthly livestream. It’s cybersecurity like you’ve never heard it before—unfiltered,…
View Asset