Anubis Ransomware Emerges with Destructive Encryption and Data Wiping

Anubis is a destructive ransomware threat that emerged in December 2024, offering both file encryption and an optional wiper mode that renders data unrecoverable. Distributed via phishing, stolen credentials, and access brokers, it operates under a ransomware-as-a-service (RaaS) model. It uses ECIES encryption and customizable execution commands to target victims primarily in healthcare, construction, and engineering sectors. Its dual-purpose design suggests motives beyond financial gain, including sabotage or espionage.