Researchers warn VECT 2.0 ransomware mishandles encryption nonces for chunked large-file encryption, overwriting previous nonces so only the final chunk's nonce is saved. Because lost nonces are neither stored nor transmitted, most large files—including VM disks, databases, and backups above 128 KB—are effectively destroyed, and the operators have promoted VECT on BreachForums and announced a partnership with TeamPCP to exploit supply-chain compromises. #VECT2.0 #TeamPCP

Lotus is a previously undocumented data-wiping malware used last year in targeted attacks against Venezuelan energy and utilities organizations, and it was analyzed by Kaspersky after being uploaded from a machine in Venezuela. Attackers used preparatory batch scripts to disable defenses, wipe drives with tools like diskpart/robocopy/fsutil, and then deploy the Lotus wiper to overwrite physical sectors, delete recovery mechanisms, and render systems unrecoverable. #Lotus #PDVSA

speed up encryption for larger files read more about Broken VECT 2.0 ransomware acts as a data wiper for large files

leaving the system in an unrecoverable state read more about New Lotus data wiper used against Venezuelan energy utility firms