---
id: 7421
title: "Snatch Ransomware khởi động lại Windows ở chế độ Safe Mode để vượt qua Anti-Virus"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/untitled/"
published_at: "2020-01-01T10:00:00Z"
tags: ["ransomware", "windows", "evasion", "data-theft", "snatch", "safe-mode"]
phying_url: "https://phying.com/item/7421"
lang: en
---

# Snatch Ransomware khởi động lại Windows ở chế độ Safe Mode để vượt qua Anti-Virus

## Summary

A new Snatch ransomware variant reboots infected Windows hosts into Safe Mode to evade antivirus, persists as the SuperBackupMan service, wipes Volume Shadow Copies and also steals data.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2020-01-01T10:00:00Z
- **Original:** https://blog.viettelcybersecurity.com/untitled/
- **Phying News:** https://phying.com/item/7421