• December 17, 2020
  • Duration: 35 min
Preventable Disaster: Hunting for Egregor Operators in Your Network

They say you can't teach an old dog new tricks, but this is certainly not the case with the notorious Maze gang. After disbanding in early November 2020, many of the gang's affiliates moved to new ransomware family called Egregor and promptly resumed their infamous exfiltration tactics.

What makes Egregor more dangerous is that it has also become the ransomware of choice for Qakbot operators, who are well known for targeting large enterprise networks and holding data for record high ransoms.

Learn more about the new ransomware group in Group-IB's white paper: Egregor ransomware: The legacy of Maze lives on (https://www.group-ib.com/whitepapers/egregor-ransomware.html?utm_source=group-ib&utm_medium=webinar&utm_content=eng)

In this webinar we will cover:

  • The latest tactics, techniques, and procedures of Egregor
  • Details of recent Qakbot campaigns
  • The similarities between Egregor, and Maze and Sekhmet

Contact us +65 3159–3798 or webinar@group-ib.com

Contact us +65 3159–3798 or webinar@group-ib.com


Oleg Skulkin

Senior DFIR Analyst

Semyon Rogachev

Malware Analyst

Group-IB is one of the leading providers of solutions aimed at detection and prevention of cyberattacks, online fraud, and IP protection. Group-IB Threat Intelligence & Attribution system was named one of the best in class by Gartner, Forrester, and IDC.

Group-IB’s technological leadership is built on the company’s 17 years of experience in cybercrime investigations worldwide and 65,000 hours of incident response accumulated in our leading forensic laboratory and 24/7 CERT-GIB.

Group-IB is a partner of INTERPOL, Europol, and a cybersecurity solutions provider, recommended by SWIFT and OSCE. Group-IB is a member of the World Economic Forum.

Learn more

Report an incident

24/7 Incident Response Assistance +65 3159-4398

Thank you for the inquiry! We will contact you soon.

We use cookies on the website to make your browser experience more personal, convenient and secure. You may block or manage the use of cookies, however, in some cases they’re essential to make this site work properly. Learn more about cookies in Group-IB Privacy And Cookies Policy.

All you need to know to #StayCyberSafe