{"id":6681,"date":"2024-08-07T16:44:34","date_gmt":"2024-08-07T23:44:34","guid":{"rendered":"https:\/\/www.alvaka.net\/beta\/?p=6681"},"modified":"2026-09-20T16:47:55","modified_gmt":"2026-09-20T23:47:55","slug":"new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers","status":"publish","type":"post","link":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/","title":{"rendered":"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers"},"content":{"rendered":"<p class=\"p1\">The Hunters International ransomware group, believed to be a rebranding of the Hive ransomware group due to code similarities, is targeting IT workers with their new malware, SharpRhino. This C# remote access trojan (RAT) enables attackers to infiltrate systems, escalate privileges, execute PowerShell commands, and ultimately deploy ransomware payloads. SharpRhino is distributed via a typo-squatting site that impersonates the legitimate Angry IP Scanner website, a tool frequently used by IT professionals\u200b (<strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\">BleepingComputer<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/cybersecuritynews.com\/sharprhino-ransomware-alert\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\">Cyber Security News<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/www.helpnetsecurity.com\/2024\/08\/06\/ransomware-targets-it-workers\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\">Help Net Security<\/span><\/a><\/strong>)\u200b.<\/p>\n<p class=\"p1\"><span class=\"s2\">If you need immediate assistance, call our 24-hour number at 1-877-662-6624 to reach a live engineer. He will get the process started for you or e-mail restore@alvaka.net.<\/span><\/p>\n<p class=\"p1\"><b>Technical Details<\/b><\/p>\n<p class=\"p1\">SharpRhino is delivered as a digitally signed 32-bit installer (ipscan-3.9.1-setup.exe), containing a self-extracting password-protected 7z archive with files necessary for infection. Once executed, the malware performs several actions to establish persistence and control over the infected system:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">Registry Modification: It modifies the Windows registry to ensure persistence by launching Microsoft.AnyKey.exe, a legitimate Microsoft Visual Studio binary repurposed for malicious use\u200b (<strong><a href=\"https:\/\/cybersecuritynews.com\/sharprhino-ransomware-alert\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Cyber Security News<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/www.helpnetsecurity.com\/2024\/08\/06\/ransomware-targets-it-workers\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Help Net Security<\/span><\/a><\/strong>)\u200b.<\/li>\n<li class=\"li1\">PowerShell Execution: The malware drops LogUpdate.bat, which executes PowerShell scripts that compile C# code into memory, facilitating stealthy execution without leaving traces on disk\u200b (<strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">BleepingComputer<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/cybersecuritynews.com\/sharprhino-ransomware-alert\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Cyber Security News<\/span><\/a><\/strong>)\u200b.<\/li>\n<li class=\"li1\">Command and Control (C2): SharpRhino creates two directories (C:\\ProgramData\\Microsoft: WindowsUpdater24 and LogUpdateWindows) for C2 communication. The malware contains hardcoded commands such as delay, which sets the timer for the next POST request, and exit, which terminates communication\u200b (<strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">BleepingComputer<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/cybersecuritynews.com\/sharprhino-ransomware-alert\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Cyber Security News<\/span><\/a><\/strong>)\u200b.<\/li>\n<\/ul>\n<p class=\"p1\"><b>Impact<\/b><\/p>\n<p class=\"p1\">Hunters International has already targeted several high-profile organizations, including Austal USA, Hoya, Integris Health, and the Fred Hutch Cancer Center. These attacks demonstrate the group\u2019s focus on critical sectors and organizations with high ethical standards. In 2024 alone, they have claimed responsibility for 134 ransomware attacks globally, excluding the Commonwealth of Independent States (CIS), making them the tenth most active ransomware group\u200b (<strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">BleepingComputer<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/www.helpnetsecurity.com\/2024\/08\/06\/ransomware-targets-it-workers\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Help Net Security<\/span><\/a><\/strong>)\u200b.<\/p>\n<p class=\"p1\"><b>Mitigation Strategies<\/b><\/p>\n<p class=\"p1\">To mitigate the risk posed by SharpRhino and similar ransomware attacks, organizations should consider the following proactive measures:<\/p>\n<ol class=\"ol1\">\n<li class=\"li1\">Awareness and Education: Train employees, especially IT staff, to recognize phishing attempts and the risks of downloading software from unofficial sources. Encourage the use of ad blockers to reduce exposure to malicious ads\u200b (<strong><a href=\"https:\/\/cybersecuritynews.com\/sharprhino-ransomware-alert\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Cyber Security News<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/www.helpnetsecurity.com\/2024\/08\/06\/ransomware-targets-it-workers\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Help Net Security<\/span><\/a><\/strong>)\u200b.<\/li>\n<li class=\"li1\"><strong><a href=\"https:\/\/www.alvaka.net\/drworx\/\" target=\"_blank\" rel=\"noopener\">Secure Backups<\/a><\/strong>: Implement a robust backup strategy, ensuring backups are stored offline or in a secure cloud environment to prevent them from being encrypted during an attack\u200b (<strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">BleepingComputer<\/span><\/a><\/strong>)\u200b.<\/li>\n<li class=\"li1\">Network Segmentation: Segment the network to limit the spread of malware within the organization and protect critical systems from lateral movement\u200b (<strong><a href=\"https:\/\/cybersecuritynews.com\/sharprhino-ransomware-alert\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Cyber Security News<\/span><\/a><\/strong>)\u200b.<\/li>\n<li class=\"li1\"><strong><a href=\"https:\/\/www.patchworx.com\/\" target=\"_blank\" rel=\"noopener\">Regular Updates and Patches<\/a><\/strong>: Keep all software up to date with the latest security patches to minimize vulnerabilities that could be exploited by attackers\u200b (<strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">BleepingComputer<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/www.helpnetsecurity.com\/2024\/08\/06\/ransomware-targets-it-workers\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Help Net Security<\/span><\/a><\/strong>)\u200b.<\/li>\n<li class=\"li1\">Security Monitoring: Utilize advanced threat detection tools to monitor network traffic and detect anomalous activities indicative of a malware infection\u200b (<strong><a href=\"https:\/\/cybersecuritynews.com\/sharprhino-ransomware-alert\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Cyber Security News<\/span><\/a><\/strong>)\u200b\u200b (<strong><a href=\"https:\/\/www.helpnetsecurity.com\/2024\/08\/06\/ransomware-targets-it-workers\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Help Net Security<\/span><\/a><\/strong>)\u200b.<\/li>\n<\/ol>\n<p class=\"p1\">By implementing these strategies, organizations can strengthen their defenses against sophisticated ransomware threats like SharpRhino and minimize potential damage.<\/p>\n<p class=\"p2\">For further details on the technical aspects and mitigation strategies for SharpRhino, refer to sources such as BleepingComputer and <strong><a href=\"https:\/\/www.helpnetsecurity.com\/2024\/08\/06\/ransomware-targets-it-workers\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s2\">Help Net Security<\/span><\/a>.<\/strong><\/p>\n<p class=\"p2\"><span class=\"s3\">If you need immediate assistance, call our 24-hour number at 1-877-662-6624 to reach a live engineer. He will get the process started for you or e-mail restore@alvaka.net.<\/span><\/p>\n<hr style=\"border: 0; border-top: 1px solid #CCCCCC; margin: 40px 0;\" \/>\n<p>Alvaka is available 24\u00d77 to assist you with any of your cybersecurity needs. Fill out the form on this page or call us at <a href=\"tel:9494285000\">(949)428-5000!<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Hunters International ransomware group, believed to be a rebranding of the Hive ransomware group due to code similarities, is targeting IT workers with their new malware, SharpRhino. This C# remote access trojan (RAT) enables attackers to infiltrate systems, escalate privileges, execute PowerShell commands, and ultimately deploy ransomware payloads. SharpRhino is distributed via a typo-squatting [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[19,24],"class_list":["post-6681","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","tag-cybersecurity","tag-ransomware"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers - Alvaka<\/title>\n<meta name=\"description\" content=\"To mitigate the risk posed by SharpRhino and similar ransomware attacks, organizations should consider the following proactive measures:\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers - Alvaka\" \/>\n<meta property=\"og:description\" content=\"To mitigate the risk posed by SharpRhino and similar ransomware attacks, organizations should consider the following proactive measures:\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/\" \/>\n<meta property=\"og:site_name\" content=\"Alvaka Website\" \/>\n<meta property=\"article:published_time\" content=\"2024-08-07T23:44:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-20T23:47:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Featured-Image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"830\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alvaka Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alvaka Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/\"},\"author\":{\"name\":\"Alvaka Team\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#\\\/schema\\\/person\\\/4629df62c1f239cb0909896caaf55bb7\"},\"headline\":\"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers\",\"datePublished\":\"2024-08-07T23:44:34+00:00\",\"dateModified\":\"2026-09-20T23:47:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/\"},\"wordCount\":592,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Featured-Image.jpg\",\"keywords\":[\"Cybersecurity\",\"Ransomware\"],\"articleSection\":[\"Articles\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/\",\"url\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/\",\"name\":\"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers - Alvaka\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Featured-Image.jpg\",\"datePublished\":\"2024-08-07T23:44:34+00:00\",\"dateModified\":\"2026-09-20T23:47:55+00:00\",\"description\":\"To mitigate the risk posed by SharpRhino and similar ransomware attacks, organizations should consider the following proactive measures:\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Featured-Image.jpg\",\"contentUrl\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Featured-Image.jpg\",\"width\":1600,\"height\":830},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#website\",\"url\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/\",\"name\":\"Alvaka Website\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#organization\",\"name\":\"Alvaka Website\",\"url\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Alvaka-logo-white-2.png\",\"contentUrl\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Alvaka-logo-white-2.png\",\"width\":209,\"height\":48,\"caption\":\"Alvaka Website\"},\"image\":{\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/#\\\/schema\\\/person\\\/4629df62c1f239cb0909896caaf55bb7\",\"name\":\"Alvaka Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ff0f7229721f07e2758536c92b69a58cb8fa511bd275a0e56d5a4b6c619a7a58?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ff0f7229721f07e2758536c92b69a58cb8fa511bd275a0e56d5a4b6c619a7a58?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ff0f7229721f07e2758536c92b69a58cb8fa511bd275a0e56d5a4b6c619a7a58?s=96&d=mm&r=g\",\"caption\":\"Alvaka Team\"},\"sameAs\":[\"https:\\\/\\\/alvaka.net\\\/beta\"],\"url\":\"https:\\\/\\\/www.alvaka.net\\\/beta\\\/author\\\/alvtlgclients-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers - Alvaka","description":"To mitigate the risk posed by SharpRhino and similar ransomware attacks, organizations should consider the following proactive measures:","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers - Alvaka","og_description":"To mitigate the risk posed by SharpRhino and similar ransomware attacks, organizations should consider the following proactive measures:","og_url":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/","og_site_name":"Alvaka Website","article_published_time":"2024-08-07T23:44:34+00:00","article_modified_time":"2026-09-20T23:47:55+00:00","og_image":[{"width":1600,"height":830,"url":"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Featured-Image.jpg","type":"image\/jpeg"}],"author":"Alvaka Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alvaka Team","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#article","isPartOf":{"@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/"},"author":{"name":"Alvaka Team","@id":"https:\/\/www.alvaka.net\/beta\/#\/schema\/person\/4629df62c1f239cb0909896caaf55bb7"},"headline":"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers","datePublished":"2024-08-07T23:44:34+00:00","dateModified":"2026-09-20T23:47:55+00:00","mainEntityOfPage":{"@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/"},"wordCount":592,"commentCount":0,"publisher":{"@id":"https:\/\/www.alvaka.net\/beta\/#organization"},"image":{"@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Featured-Image.jpg","keywords":["Cybersecurity","Ransomware"],"articleSection":["Articles"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/","url":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/","name":"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers - Alvaka","isPartOf":{"@id":"https:\/\/www.alvaka.net\/beta\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#primaryimage"},"image":{"@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Featured-Image.jpg","datePublished":"2024-08-07T23:44:34+00:00","dateModified":"2026-09-20T23:47:55+00:00","description":"To mitigate the risk posed by SharpRhino and similar ransomware attacks, organizations should consider the following proactive measures:","breadcrumb":{"@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#primaryimage","url":"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Featured-Image.jpg","contentUrl":"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Featured-Image.jpg","width":1600,"height":830},{"@type":"BreadcrumbList","@id":"https:\/\/www.alvaka.net\/beta\/new-sharprhino-malware-being-used-by-ransomware-gangs-to-attack-it-workers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.alvaka.net\/beta\/"},{"@type":"ListItem","position":2,"name":"New SharpRhino Malware Being Used By Ransomware Gangs to Attack IT Workers"}]},{"@type":"WebSite","@id":"https:\/\/www.alvaka.net\/beta\/#website","url":"https:\/\/www.alvaka.net\/beta\/","name":"Alvaka Website","description":"","publisher":{"@id":"https:\/\/www.alvaka.net\/beta\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.alvaka.net\/beta\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.alvaka.net\/beta\/#organization","name":"Alvaka Website","url":"https:\/\/www.alvaka.net\/beta\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.alvaka.net\/beta\/#\/schema\/logo\/image\/","url":"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Alvaka-logo-white-2.png","contentUrl":"https:\/\/www.alvaka.net\/beta\/wp-content\/uploads\/2026\/06\/Alvaka-logo-white-2.png","width":209,"height":48,"caption":"Alvaka Website"},"image":{"@id":"https:\/\/www.alvaka.net\/beta\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.alvaka.net\/beta\/#\/schema\/person\/4629df62c1f239cb0909896caaf55bb7","name":"Alvaka Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/ff0f7229721f07e2758536c92b69a58cb8fa511bd275a0e56d5a4b6c619a7a58?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ff0f7229721f07e2758536c92b69a58cb8fa511bd275a0e56d5a4b6c619a7a58?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ff0f7229721f07e2758536c92b69a58cb8fa511bd275a0e56d5a4b6c619a7a58?s=96&d=mm&r=g","caption":"Alvaka Team"},"sameAs":["https:\/\/alvaka.net\/beta"],"url":"https:\/\/www.alvaka.net\/beta\/author\/alvtlgclients-com\/"}]}},"_links":{"self":[{"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/posts\/6681","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/comments?post=6681"}],"version-history":[{"count":1,"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/posts\/6681\/revisions"}],"predecessor-version":[{"id":6682,"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/posts\/6681\/revisions\/6682"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/media\/714"}],"wp:attachment":[{"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/media?parent=6681"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/categories?post=6681"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.alvaka.net\/beta\/wp-json\/wp\/v2\/tags?post=6681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}