HYFLOCK
2Stories
0Linked CVEs
Latest
HYFLOCK ransomware flaw leaves parts of larger files readable, offering limited recovery
Check Point Exposure Management researchers found that the October 17 build of HYFLOCK encrypted only the first 4,096 bytes of larger files, leaving the rest intact. They recovered 73 internal components from seven Office files, but could not decrypt the encrypted prefixes without matching key material. An earlier October build could discard file data outright, which could block full recovery even with the correct key.
New HYFLOCK ransomware encrypts Windows files and tries to block recovery
HYFLOCK ransomware operators have developed successive Windows encryptors that lock files, access network shares and attempt to obstruct recovery. Researchers confirmed encryption and scheduled-task registration, but did not establish successful domain-wide propagation or reliable execution after remote deployment.