Snatch reboots Windows to bypass antivirus
December 11, 2019
Cybersecurity experts discovered a new version of the Snatch ransomware. This reboots infected Windows computers into Safe Mode. Then, it encrypts victims’ files to avoid antivirus detection.
In the diagnostic mode, Windows starts with a minimal set of drivers and…