Snatch Ransomware: Evolving Threat and Defense Strategies

Snatch ransomware is a ransomware-as-a-service (RaaS) variant that was first discovered in 2018. It is known for its ability to reboot devices into Safe Mode, where many security protections are disabled, before encrypting files. Snatch also uses double extortion tactics, threatening to publish stolen data on the internet if the victim does not pay the ransom.