Skip to content
Threat Feed
Subscribe

Actor

CLOP

1 brief RSS
high threat

Detection of Shadow Storage Volume Manipulation via Vssadmin

Threat actors deploying ransomware such as CLOP, BlackByte, and Medusa manipulate Windows shadow storage volumes using vssadmin.exe to prevent data recovery.

Windows CLOP ransomware impact
1r 1t