Ransomware alert: files encrypted with the .ths extension
Huorong observed increased activity by ransomware that appends .ths to encrypted files. Investigated incidents involved gaining host access before deploying the payload.
Key points
Local documents and business data may be affected.
One documented incident involved SQL injection and remote login.
Maintain updates, access controls and recoverable offline backups.
