How Sinobi Ransomware Encrypts Files and Destroys Backups (opens in new tab)

Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Note: Affiliate link – your enrollment helps support this platform at no extra cost to you. Sinobi is a ransomware strain first observed in July 2025, likely a rebrand of Lynx ransomware (active since 2024). It operates as Ransomware-as-a-Service. It encrypts files using Curve-25519 + AES-128-CTR, appends a .SINOBI extension, and drops a README.txt ranso...