AdvisoriesHuorong report · Local editorial summary

Ransomware alert: files encrypted with the .ths extension

Originally publishedHuorong Security

Huorong observed increased activity by ransomware that appends .ths to encrypted files. Investigated incidents involved gaining host access before deploying the payload.

Key points

  • Local documents and business data may be affected.

  • One documented incident involved SQL injection and remote login.

  • Maintain updates, access controls and recoverable offline backups.

Back to all articles