Yurei Ransomware: A Sophisticated Double-Extortion Threat

A new, sophisticated ransomware strain named Yurei has emerged, built in the Go language for rapid and stealthy attacks. It employs a double-extortion model, encrypting files with the ".Yurei" extension while threatening to leak stolen data. The malware is designed to be irreversible, disabling recovery options by deleting shadow copies, system backups, and event logs. Yurei spreads laterally across networks using SMB shares and removable drives, and it executes robust anti-forensic routines to erase all traces of its activity. Researchers note its code is derived from an open-source project but has been enhanced for greater speed and stealth, making it a professional-grade threat.