SentinelOne Demo: SentinelOne VS GhostLocker RaaS – Detection and Mitigation

In this video demonstration, see how the SentinelOne Singularity XDR Platform protects GhostLocker RaaS (Ransomware-as-a-Service), a significant cyber threat that surfaced in late 2023. GhostLocker RaaS is linked to GhostSec, a hacktivist group with ties to Gaza, and loosely associated with other collectives such as ‘Anonymous’ and “SiegedSec’.
GhostLocker RaaS is primarily promoted across GhostSec’s Telegram channels and associated communities. The actors behind GhostLocker are also connected with GhostStealer. The RaaS is currently offered to affiliates for between $999 and $1,200 USD.

In January 2024, the updated “REWRITE” (aka 2.x) version of GhostLocker was released and heavily promoted. The current versions of GhostLocker are written in Golang, and affiliates are offered a fully featured management panel for tracking campaigns and payouts. The RaaS also claims to be FUD (undetectable) out of the box, with support for rapid data encryption and automated exfiltration.

The SentinelOne Singularity XDR Platform detects and prevents malicious behaviors and artifacts associated with GhostLocker RaaS.

~Subscribe to our channels:~
Website: https://www.sentinelone.com/
LinkedIn: https://www.linkedin.com/company/sentinelone/
Twitter: https://twitter.com/SentinelOne
Facebook: https://www.facebook.com/SentinelOne
Instagram: https://www.instagram.com/sentinelsec/
Threads: https://www.threads.net/@sentinelsec