Monday, December 16, 2024
HomeRansomwareRansomware-as-a-Service - New Saturn Ransomware Available to Anyone For Free

Ransomware-as-a-Service – New Saturn Ransomware Available to Anyone For Free

Published on

SIEM as a Service

Now any anyone can become a distributor of newly identified Saturn ransomware through the Ransomware as a Service affiliate program. To become a distributor of ransomware all you need is to signup in the RaaS portal download a copy and distribute it.

The Raas portal was detected and the Saturn ransomware Raas business model is different from other RaaS portal’s here distributor not required to pay any advance before using the ransomware binary.

RaaS economic business model that allows attackers to earn money without distributing the malware. Instead, they host their services in dark web and anyone can buy it and they can change their own modification such as ransom amount, ransom notes.

The users can download a file called stub from the Saturn RaaS portal and then embed the file into other files such as EXEs, Office, PDF, or other documents.
- Advertisement - SIEM as a Service

The ransomware can be distributed in any means Phishing Email, Email Attachments, Embedded Hyperlink, Drive by Infection and Websites & Downloads.

RaaS portal

Infected victims should pay ransom fees on Saturn payment portal and the distributor of the ransomware will get 70% of the total payment and 30% to Saturn creators.

Last Friday researchers from McAfee Labs detected RaaS portal with the same business model.Once the distributor successfully compromised the victims and if the victim paid the ransom amount then the 10% of ransom amount will be transferred into the original developer’s wallet and 90% to the distributor.

ESET says there is a temporary drop in the number of spikes that were observed when compared to the end of the last year.

Also Read Ransomware Attack Response and Mitigation Checklist

Without a doubt 2017 is the year of data breaches and ransomware, now attackers shifted their focus to crypto mining attacks by using victims resources. Starting from the year 2018 a number of Cryptomining Attacks launched to Mine Monero Cryptocurrency.

Final Notes

The ransomware is a turnkey business for some criminals, and victims still pay the ever-increasing demands for ransom, it’s become a billion-dollar industry that shows no signs of going away anytime soon.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

The Rise of AI-Generated Professional Headshots

It’s clear that a person’s reputation is increasingly influenced by their online presence, which...

Hackers Abuse Google Ads To Attacking Graphic Design Professionals

Researchers identified a threat actor leveraging Google Search ads to target graphic design professionals,...

Hackers Using New IoT/OT Malware IOCONTROL To Control IP Cameras, Routers, PLCs, HMIs And Firewalls

Recent cyberattacks targeting critical infrastructure, including fuel management systems and water treatment facilities in...

Hackers Exploiting Apache Struts2 Vulnerability to Upload Malicious Payloads

Hackers have begun exploiting a newly discovered vulnerability in Apache Struts2, a widely used...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

US Charged Chinese Hackers for Exploiting Thousands of Firewall

The US Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned Sichuan Silence...

Mauri Ransomware Leverages Apache ActiveMQ Vulnerability to Deploy CoinMiners

The Apache ActiveMQ server is vulnerable to remote code execution (CVE-2023-46604), where attackers can...

Black Basta Ransomware Leverages Microsoft Teams To Deliver Malicious Payloads

In a resurgence since May 2024, the Black Basta ransomware campaign has exhibited a...