Hakbit - Ransomware
The ransomware was discovered in late 2019 with new variants appearing on the threat landscape into mid-2020. The malicious software, also known as Horse, Abarcy, Corona, and Ravack, uses AES encryption and demands up to 3 Bitcoin for the decryption key. The malware has targeted multiple sectors including pharmaceutical, legal, financial, retail, healthcare, information technology, manufacturing, and insurance. Some variants use GuLoader to drop the ransomware onto systems after users are convinced to open emails with malicious Microsoft Excel attachments.