Issue:
Does F-Secure detect and protect against the Thanos / RIPlace evasion technique?
Resolution:
Our engine DeepGuard blocks it as Trojan:W32/CryptoRansom.A!DeepGuard. The detection is for the variant that uses RIPlace which is Thanos. Previous variant without this technique is named Hakbit. We have detection coverage for the older variants. We will continue to monitor threats utilizing this technique and update the detection accordingly should something change in the near future.
Article no: 000023781