Threat Brief: Information on Bad Rabbit Ransomware Attacks
Summary: Bad Rabbit is a ransomware attack that, per this Unit 42 post, primarily affects countries in Eastern Europe and encrypts the entire disk, similar to Petya/NotYetya but with different malware. It gains initial entry through a fake Adobe Flash update hosted on compromised websites, then spreads inside a network by harvesting credentials with Mimikatz and using hardcoded credentials.
Bottom line: The post states it is not aware of any reports of successful recovery after paying the ransom, so a single user installing a bogus Flash update can cost an organization its entire disk with no proven path back.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026