"Data Anubis.rar" is a malicious archive file associated with the Anubis Ransomware-as-a-Service (RaaS) operation, which emerged in late 2024 to target sectors such as healthcare and legal services. This threat employs a double-extortion model, utilizing ECIES encryption and a distinct "/WIPEMODE" function that destroys data with null bytes rather than encrypting it, often following phishing-based delivery. Technical analysis and indicators of compromise are available at Trend Micro .
Anubis: A Closer Look at an Emerging Ransomware with Built-in Wiper Data Anubis.rar