BlackByte is known to exploit vulnerabilities quickly after they’re announced, so one of the most effective strategies companies can employ to protect against this group is to maintain an efficient vulnerability management process. The ransomware itself automates many of the initialization steps required to execute successfully, so companies should ensure detections they have in place for events such as disabling the Windows firewall and deleting shadow copies are working as intended. Customizing detections to an organization’s unique baseline activity while ensuring coverage of post exploitation activity, is a key benefit offered by Binary Defense’s Threat Hunting services.

https://www.bleepingcomputer.com/news/security/blackbyte-ransomware-gang-is-back-with-new-extortion-tactics/