Rust based Spirals ransomware hits South Asian firm in 24h

The article discusses a new Rust-based ransomware called Spirals, which targets IT services, specifically an incident involving a South Asian company. The attack was executed swiftly, resulting in network encryption within 24 hours, showcasing the attackers' advanced skills. Key points include: a compromised IIS server via an ASP.NET web shell, privilege escalation methods, automated lateral movement, and a double extortion model that threatens data publication if ransoms are not paid.

For detection and defense, monitoring internet-facing servers for anomalies, patching vulnerabilities, and tracking unauthorized access attempts are emphasized.