A new ransomware strain, Cephalus, is attacking companies by using a legitimate SentinelOne binary to execute its payload, disable defenses, and encrypt files.

Ransomware never sleeps. Every few months, a new strain makes headlines with its unique tricks, leaving organizations scrambling to…

ASEC exposed Cephalus, a Go-based RaaS group attacking RDP. The malware uses VirtualLock, XOR encryption, and a fake AES key pattern to severely complicate memory and forensic analysis.