It was confirmed that Dagon Locker ransomware was circulated.
Since it is in the form of RaaS, more attention is needed because
the circulated path and attack target may vary depending on the attacker.

It uses ChaCha20 encryption method.
It is known to forcibly terminate Windows services and processes for attacking.

It was confirmed that trueEP blocks this ransomware fundamentally without additional patches or s
by its own behavior-based malicious behavior blocking algorithm.