Karma Ransomware | An Emerging Threat With A Hint of Nemty Pedigree
released on 2021-10-19 @ 02:31:57 PM
Karma is a relatively new ransomware threat actor, having first been observed in June of 2021. The group has targeted numerous organizations across different industries. Reports of a group with the same name from 2016 are not related to the actors currently using the name. An initial technical analysis of a single sample related to Karma was published by researchers from Cyble in August.
In this post, SentinelOne takes a deeper dive, focusing on the evolution of Karma through multiple versions of the malware appearing through June 2021. In addition, SentinelOne explores the links between Karma and other well known malware families such as NEMTY and JSWorm and offer an expanded list of technical indicators for threat hunters and defenders.