SentinelOne Vs. Lilith Ransomware – Prevention and Detection

Lilith (aka LilithCrypt) Ransomware is a low-sophistication ransomware family which emerged in July of 2022. Lilith engages in multi-pronged extortion and based on current observations, Lilith victims are given 3 days to comply with the attackers’ demands. Otherwise, they’ll be listed on the Lilith victim blog (alongside their stolen data).

Encryption stages in Lilith are handled via the stock Windows cryptographic API. Lilith operators appear to only communicate with the victims via TOX chat.

#ransomware #lilithcrypt #cybersecurity