Uragan Ransomware

In our recovery lab today at Lockbit Decryptor, we isolated the Uragan ransomware strain. Our analysis confirms this is not a sophisticated enterprise threat but a variant of the open-source Chaos ransomware. This variant uses a stream cipher with a hard-coded key and appends the .uragan extension. Despite its aggressive ransom note and threats of…