Egregor ransomware bombards victims' printers with ransom notes


Level 16
May 4, 2019
The Egregor ransomware uses a novel approach to get a victim's attention after an attack - shoot ransom notes from all available printers.

Ransomware gangs know that many businesses would rather hide a ransomware attack than make it public, including to employees, for fear of the news affecting stock prices and their reputation.

To increase public awareness of the attack and pressure a victim into paying, the Egregor operation is known to repeatedly print ransom notes from all available network and local printers after an attack.