Unveiling New Big Head Ransomware Variants and Their Stealthy Tactics

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The emergence of Big Head ransomware and its variants suggests a shared source, distributed through deceptive Windows update and Word installer disguises. The threat actor engages via email and Telegram, showcasing the malware on a YouTube channel, while a potential connection to Bahasa-speaking countries remains speculative.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.