Le rançongiciel Egregor

ANSSI's 11/12/2020 advisory analyzes the Egregor ransomware family (RaaS), its operational links to Maze and Sekhmet, victimology (Big Game Hunting), infection chain (phishing, Qakbot/Ursnif/IcedID, RDP, PsExec, Cobalt Strike), encryption/exfiltration practices (ChaCha, RSA-2048, RClone), public data-leak/pressure methods, observed domains and TTP mappings (detailed MITRE techniques), and provides prioritized defensive and incident-response recommendations.