Endpoint Protection

 View Only

  • 1.  Saturn Ramsomware - are defintions available?

    Posted Feb 19, 2018 06:06 AM

    Hi All, quick question. Do the SEP definitions have in place/available detections for Saturn Ramsomware yet?

    Cheers

    PaulC



  • 2.  RE: Saturn Ramsomware - are defintions available?

    Posted Feb 19, 2018 06:51 AM

    Hi PaulC,

    Thanks for the post.  New items in recent days have discussed this new RAAS:

    https://www.bleepingcomputer.com/news/security/new-saturn-ransomware-actively-infecting-victims/

     

    Known samples are caught with a Trojan.Gen.2 classification. Don't rely on AV alone, though!  Deploy all SEP components and follow the other advice in this article:

     

    Hardening Your Environment Against Ransomware
    https://www.symantec.com/connect/articles/hardening-your-environment-against-ransomware

     

    Please do update this thread with any additional questions or mark it solved if you have received your answer.