HardBit ransomware version 2.0 tries to force victims to disclose their insurance coverage details so they can adjust their ransom demand, making it more likely that the insurer will cover the costs. The operators of HardBit 2.0, which encrypts files on Windows devices and deletes volume shadow copies to make recovery difficult, advise against working with intermediaries and instruct victims to contact them directly for negotiations.
Cybersecurity researchers from Varonis have published a report on the HardBit ransomware, including technical details and indicators of compromise that can be used to identify the threat.
