Monkey Ransomware Rust Variant Mass Encryption/Wiper Behavior

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•2

Detects a large volume of file write, rename, or creation operations within a single minute by a single process, concurrently with the creation of files containing common ransomware keywords (e.g., 'readme', 'decrypt', 'how_to'). This behavior is characteristic of ransomware encryption activities.