It attacks Remote Desktop Services (RDP) and infiltrates Windows devices.
And terminate the database server and MS Office application related processes.

Delete the event log and shadow replication volume, disable Data Execution Prevention,
then It is known that the files are hijacked, encrypted and appended with .venus extension.

It was confirmed that trueEP blocks this ransomware fundamentally without additional patches or s
by its own behavior-based malicious behavior blocking algorithm.