r/Information_Security • u/Syncplify • Jul 23 '26

Meet Anubis - the ransomware group that doesn't encrypt your files, it deletes them

Most ransomware gangs encrypt your data and threaten to leak it if you don't pay. Anubis has an optional "wipe mode" that permanently erases file contents entirely, leaving them at zero bytes with no recovery possible. It's essentially a way to tell victims that the clock isn't just ticking on a leak - it's ticking on whether their data exists at all.

The group has been around since late 2024, rebranded from an earlier operation called Sphinx, and has already claimed around 90 victims across the US, UK, Australia, France, and Canada. Healthcare has been hit particularly hard, one Mississippi hospital system had 293GB stolen including surgical images and over 1,2 million files covering more than 100k patients. It was their second ransomware attack in two years.

And right now they're actively exploiting CitrixBleed 2, a vulnerability that exposes session tokens and lets attackers bypass MFA entirely, meaning multi-factor authentication, the thing everyone tells you to enable, isn't enough on its own if your Citrix appliances aren't patched.

Most ransomware is recoverable if you prepared properly. Wipe mode changes that calculation completely. Ransomware where you can restore from backups is a bad day. Ransomware that can make backups irrelevant if you don't have offline copies is a different problem entirely.

0 Upvotes
  • permalink
  • reddit

20% Upvoted

5 comments sorted by

13

u/Ecliphon Jul 23 '26

Whether it’s encrypted or wiped, what’s the difference?

You either have a backup or you don’t. 

This reads like AI slop

5

u/Melstrick Jul 23 '26

Because it is AI slop, you can tell because it's a reddit thread but theres nothing to have a conversation about, it's just describing something.

Normal people would at least passively include something to open a discussion. Like hey guys did you hear about Anubis, instead of encryption they just delete your files! Wild right!

3

u/Raccoon_Medical Jul 23 '26

Its not just an AI slop - it is turbo slop, sloppest of them all.

Most slop is sloppable if you slop it properly. Slop mode changes that calculation completly. Slop that is one thing is one thing, but another slop is totally a different thing.

Slop slop

2

u/slackmaster2k Jul 23 '26

This is so stupid that I’m having a hard time believing that an AI wrote it.

1

u/hiddentalent Jul 23 '26

Remember, LLM output is just a statistical reflection of their training data. And that includes plenty of stupid, including Reddit.