Rubrik Adds ReversingLabs Ransomware Intelligence to Backup Scanning

Summary

Rubrik’s Threat Monitoring and Threat Hunting now use ReversingLabs’ ransomware feed to scan backup snapshots for indicators, including across historical backups, helping identify threats and clean recovery points.

Key points

• The integration adds ReversingLabs’ ransomware intelligence to Rubrik Threat Monitoring and Threat Hunting.
• Rubrik scans backup snapshots in place, without moving the data or requiring a new agent or console.
• The feed includes file hashes, command-and-control infrastructure, and payload delivery URLs, with MITRE ATT&CK mappings and ransomware kill-chain stage tags.
• Threat Hunting can scan up to 75,000 backups in an estimated 60 seconds and examine snapshot history to identify a clean recovery point.
• New intelligence can be checked against older snapshots, including backups taken before the relevant indicators were known.
• The article cites research that ransomware operators frequently target backups and that compromised backups are associated with higher encryption rates and recovery costs.

CVE

People

Threat Actors

Vendors

Products

Countries

Industries

Related Articles

• Ransomware Disclosures Fell to 862 in September as Affiliates Continued Evolving Their TacticsAkira
• CYFIRMA Report Warns of Ransomware and Supply-Chain Risks for South Asian ManufacturingAkira
• CYFIRMA Report Maps Cyber Threats in Australia and New ZealandAkira
• CYFIRMA Report Finds Rising Ransomware and APT Activity Targeting Real Estate and ConstructionAkira
• Akira Claims It Stole Data from Hygrade SafetyAkira