KAWA4096 Ransomware Employs WMI Techniques to Delete Backup Snapshots

Trustwave SpiderLabs has played a crucial role in monitoring new ransomware variants in the incredibly unstable ransomware threat landscape of 2025, where dozens of new groups have emerged and caused extensive disruptions across multiple sectors. Among these, the KAWA4096 ransomware has been identified as a notable newcomer, first detected in June 2025. This strain has […]

The post KAWA4096 Ransomware Employs WMI Techniques to Delete Backup Snapshots appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.