Filtered by tag: endpoint security × Clear
Anubis Ransomware Hackers Deploy New Lindnor Backdoor and 13 Security-Killing Tools in U.S. Attack
Matched: health
Attackers using Anubis ransomware targeted a U.S. organization in October 2026, deploying a new custom backdoor called Lindnor and 13 tools designed to disable security software. Symantec blocked the encryption payload before it executed. The Anubis group, tracked as Hawkmoth, operates a RaaS platform rebranded from Sphinx ransomware in December 2024 and has claimed roughly 96 victims, 52% in the U.S. Defenders should monitor for Lindnor's known hashes, suspicious drivers, and AnyDesk installations.