Back to Resources

SentinelOne Demo: SentinelOne VS GhostLocker RaaS – Protection

In this video demonstration, see how the SentinelOne Singularity XDR Platform protects GhostLocker RaaS (Ransomware-as-a-Service), a significant cyber threat that surfaced in late 2023. GhostLocker RaaS is linked to GhostSec, a hacktivist group with ties to Gaza, and loosely associated with other collectives such as ‘Anonymous’ and “SiegedSec’.
GhostLocker RaaS is primarily promoted across GhostSec’s Telegram channels and associated communities. The actors behind GhostLocker are also connected with GhostStealer. The RaaS is currently offered to affiliates for between $999 and $1,200 USD.

In January 2024, the updated “REWRITE” (aka 2.x) version of GhostLocker was released and heavily promoted. The current versions of GhostLocker are written in Golang, and affiliates are offered a fully featured management panel for tracking campaigns and payouts. The RaaS also claims to be FUD (undetectable) out of the box, with support for rapid data encryption and automated exfiltration.

The SentinelOne Singularity XDR Platform detects and prevents malicious behaviors and artifacts associated with GhostLocker RaaS.

~Subscribe to our channels:~
Website: https://www.sentinelone.com/
LinkedIn: https://www.linkedin.com/company/sentinelone/
Twitter: https://twitter.com/SentinelOne
Facebook: https://www.facebook.com/SentinelOne
Instagram: https://www.instagram.com/sentinelsec/
Threads: https://www.threads.net/@sentinelsec

Watch Now

Experience the World’s Most Advanced Cybersecurity Platform

See how our intelligent, autonomous cybersecurity platform harnesses the power of data and AI to protect your organization now and into the future.