CoopaLoopa

Odd that you can see exactly in that tweet where his staffer stopped writing and handed the phone over to Donnie.

Open PowerShell and run:

winget install 7zip.7zip

Winget is built into windows after around Win10 1903, so you don’t even have to launch a browser to download most apps anymore.

Locking a company out of their systems isn’t the most lucrative part of ransomware anymore. Data exfiltration and threatening to release the data to the highest bidder is now the norm.

Ransomware also typically sits on a system doing nothing for ~6 weeks before ever starting to encrypt and upload data. Even if companies have backups to restore from, they need to choose whether they’re going to restore entire machines quickly and risk still having the ransomware on the restored machine. Or they can take the long a painful route of spinning up new machines, then restoring just the data itself to individual apps/services to ensure you don’t still have ransomware after the restore.