Low-code, high impact: BERT is not an isolated development, it is part of a growing wave of emerging ransomware groups that are proving both capable and elusive. In just the last three to four months, cybersecurity researchers have identified multiple new ransomware families that signal a shift toward leaner, low-code, and faster malware operations.For instance, Gunra ransomware, spotted in April, appends a .encrt extension to encrypted files and drops a ransom note named r3adm3.txt in multiple directories, and has claimed to target healthcare, electronics, and beverage manufacturing sectors.Silent ransomware group, known for callback phishing emails, masquerading as well-known businesses that offer subscription plans, has changed tactics by stealing sensitive data such as customer records, phone numbers, intellectual property, and internal emails, and only then triggering a ransom demand.”CISOs are now contending with two emerging archetypes of ransomware: ‘loud-lockers’ like the Gunra group that use multithreading and anti-recovery routines to lock down systems instantly, and ‘quiet siphoners’ like the Silent Ransom group who avoid malware entirely. Groups like Mamona represent a third hybrid”, quick but malware-light, often operating offline and deleting traces post-execution,” said Sanchit Vir Gogia, chief analyst and CEO at Greyhound Research.Gogia added that this evolution demands layered defences that prioritise blast radius containment, process forensics, and deception-based detection. Legacy AV, EDR, and perimeter tools alone cannot keep pace with this modular, multi-variant model of threat execution.
First seen on csoonline.com
Jump to article: www.csoonline.com/article/4019468/trend-micro-flags-bert-a-rapidly-growing-ransomware-threat.html
