SentinelOne Vs. HelloXD Ransomware – Detection and Prevention

The HelloXD ransomware family was first observed in late 2021. The ‘commercial’ ransomware is tied to specific sellers active in known ‘underground’ forums/marketplaces. Over the last couple of months, operators of HelloXD have increased activity and introduced updated versions of the HelloXD payload. The most recent updates are focused on detection evasion and the speed/efficiency of encryption.

Verified by MonsterInsights