Watch Webinar Recording
  • December 17, 2020
  • Duration: 35 min
Preventable Disaster: Hunting for Egregor Operators in Your Network

They say you can't teach an old dog new tricks, but this is certainly not the case with the notorious Maze gang. After disbanding in early November 2020, many of the gang's affiliates moved to new ransomware family called Egregor and promptly resumed their infamous exfiltration tactics.

What makes Egregor more dangerous is that it has also become the ransomware of choice for Qakbot operators, who are well known for targeting large enterprise networks and holding data for record high ransoms.

Learn more about the new ransomware group in Group-IB's white paper: Egregor ransomware: The legacy of Maze lives on (

In this webinar we will cover:

  • The latest tactics, techniques, and procedures of Egregor
  • Details of recent Qakbot campaigns
  • The similarities between Egregor, and Maze and Sekhmet

Contact us +65 3159–3798 or

Contact us +65 3159–3798 or


Oleg Skulkin

Senior DFIR Analyst

Semyon Rogachev

Malware Analyst

Group-IB is one of the leading providers of solutions aimed at detection and prevention of cyberattacks, online fraud, and IP protection. Group-IB Threat Intelligence & Attribution system was named one of the best in class by Gartner, Forrester, and IDC.

Group-IB’s technological leadership is built on the company’s 18 years of experience in cybercrime investigations worldwide and 70,000 hours of incident response accumulated in our leading forensic laboratory and 24/7 CERT-GIB.

Group-IB actively collaborates with international partners such as INTERPOL and Europol in the fight against cybercrime, and is an industry-leading cybersecurity solutions provider.

Learn more

Get new report
Ransomware Uncovered 2021/2022

The well-known complete guide to the latest tactics, techniques, and procedures of ransomware operators based on MITRE ATT&CK®

Report an incident

Get 24/7 incident response assistance from our global team

APAC: +65 3159-3798
Europe: +31 20 226-90-90
EMA: +971 4 508 1605

Thank you for filling out the form! We will get back to you shortly.

We use cookies on the website to make your browser experience more personal, convenient and secure. You may block or manage the use of cookies, however, in some cases they’re essential to make this site work properly. Learn more about cookies in Group-IB Privacy And Cookies Policy.

Get new report Ransomware Uncovered 2021/2022