--- title: "New Cactus Ransomware: A Dangerous Threat Evading Antivirus Detection" description: Learn about the new Cactus ransomware that evades antivirus and how AppGuard can prevent such attacks. Business owners, talk to us today! image: https://prevent-ransomware.com/hubfs/AdobeStock_480490513.jpeg --- [![CHIPS Cyber Defense Solutions, LLC](https://prevent-ransomware.com/hubfs/chips_blue_logo_higher_res-20210817212617.png) Cyber Defense Solutions, LLC](https://prevent-ransomware.com) ☰ [About](https://prevent-ransomware.com/about) [Solutions](https://prevent-ransomware.com/solutions) [Industries](https://prevent-ransomware.com/industries) [Resources](https://prevent-ransomware.com/resources) [Partner With Us](https://prevent-ransomware.com/meetings/tony-chiappetta/30-minute-initial-meeting) [About](https://prevent-ransomware.com/about) [Solutions](https://prevent-ransomware.com/solutions) [Industries](https://prevent-ransomware.com/industries) [Resources](https://prevent-ransomware.com/resources) [Partner With Us](https://prevent-ransomware.com/meetings/tony-chiappetta/30-minute-initial-meeting) # New Cactus Ransomware: A Dangerous Threat Evading Antivirus Detection ![Tony Chiappetta](https://prevent-ransomware.com/hubfs/Tony%20LinkedIn.jpg) by [Tony Chiappetta](https://prevent-ransomware.com/blog/author/tony-chiappetta) May 11, 2023 The threat of ransomware continues to loom large for businesses of all sizes, with attackers constantly finding new ways to evade traditional security measures. The latest example of this is the CACTUS ransomware, which has recently emerged as a particularly concerning threat due to its ability to encrypt itself in order to bypass antivirus detection.[According to a recent report by Bleeping Computer](https://www.bleepingcomputer.com/news/security/new-cactus-ransomware-encrypts-itself-to-evade-antivirus/), CACTUS ransomware is able to achieve this by using a technique known as "process hollowing," which involves hijacking a legitimate process in order to execute its own code. By doing so, the ransomware is able to blend in with legitimate processes and evade detection by antivirus software. Based on their investigations, experts at Kroll corporate investigation and risk consulting firm have revealed that CACTUS ransomware gains initial entry into a victim's network by exploiting known vulnerabilities in Fortinet VPN appliances.  The hacker gained entry through known vulnerabilities in Fortinet VPN appliances, pivoting inside from a VPN server with a service account. This is just the latest reminder that businesses can no longer rely solely on traditional antivirus solutions to protect against ransomware and other advanced threats. Instead, a multi-layered approach to security is needed, which includes solutions such as AppGuard that are specifically designed to prevent attacks like the CACTUS ransomware. AppGuard's unique approach to security involves isolating individual applications and processes, ensuring that even if one is compromised, the rest of the system remains protected. This makes it an ideal solution for protecting against advanced threats like CACTUS ransomware, which rely on evading traditional antivirus solutions. If you're a business owner looking to protect your organization against ransomware and other advanced threats, [don't hesitate to get in touch with us today](https://prevent-ransomware.com/getting-started)to learn more about how AppGuard can help. With the right security measures in place, you can avoid falling victim to costly and disruptive attacks like the CACTUS ransomware. Like this article? Please share it with others! [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png)](https://www.facebook.com/share.php?u=https%3A%2F%2Fprevent-ransomware.com%2Fblog%2Fnew-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png)](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fprevent-ransomware.com%2Fblog%2Fnew-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fprevent-ransomware.com%2Fblog%2Fnew-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fprevent-ransomware.com%2Fblog%2Fnew-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png)](mailto:?subject=Check+out+https%3A%2F%2Fprevent-ransomware.com%2Fblog%2Fnew-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection%3Futm_medium%3Dsocial%26utm_source%3Demail&body=Check+out+https%3A%2F%2Fprevent-ransomware.com%2Fblog%2Fnew-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection%3Futm_medium%3Dsocial%26utm_source%3Demail)       ###### Tags: [AppGuard,](https://prevent-ransomware.com/blog/tag/appguard) [Ransomware](https://prevent-ransomware.com/blog/tag/ransomware) ![Tony Chiappetta](https://prevent-ransomware.com/hubfs/Tony%20LinkedIn.jpg) Post by [Tony Chiappetta](https://prevent-ransomware.com/blog/author/tony-chiappetta) May 11, 2023 [![CHIPS Cyber Defense Solutions, LLC](https://prevent-ransomware.com/hubfs/chips_blue_logo_higher_res-20210817212617.png)](https://prevent-ransomware.com) AppGuard Commercial Distributor for the Americas. Mt. Juliet, Tennessee. [Follow us on LinkedIn](https://www.linkedin.com/company/chips-cyber-defense-solutions-llc) #### The Stack - [AppGuard](https://prevent-ransomware.com/AppGuard) - [Zimperium](https://prevent-ransomware.com/Zimperium) - [CyberCloak](https://prevent-ransomware.com/CyberCloak) #### Company - [About Us](https://prevent-ransomware.com/about) - [The MSP 3.0 Story](https://prevent-ransomware.com/MSP3) - [Become a Partner](https://prevent-ransomware.com/meetings/tony-chiappetta/30-minute-initial-meeting) © 2026 CHIPS Cyber Defense Solutions, LLC. All rights reserved. Built for the Best. ```json { "@context" : "http://schema.org/", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Tony Chiappetta", "url" : "https://prevent-ransomware.com/blog/author/tony-chiappetta" }, "dateModified" : "2023-05-11T9:00:00 AM", "datePublished" : "2023-05-11 09:00:00", "description" : "Learn about the new Cactus ransomware that evades antivirus and how AppGuard can prevent such attacks. Business owners, talk to us today!", "headline" : "New Cactus Ransomware: A Dangerous Threat Evading Antivirus Detection", "image" : { "@type" : "ImageObject", "url" : "https://20916912.fs1.hubspotusercontent-na1.net/hubfs/20916912/AdobeStock_480490513.jpeg" }, "mainEntityOfPage" : { "@id" : "https://prevent-ransomware.com/blog/new-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection", "@type" : "WebPage" }, "name" : "New Cactus Ransomware: A Dangerous Threat Evading Antivirus Detection", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://prevent-ransomware.com/hubfs/chips_blue_logo_higher_res-20210817212617.png" }, "name" : "CHIPS Cyber Defense Solutions, LLC" } } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Tony Chiappetta", "url" : "https://prevent-ransomware.com/blog/author/tony-chiappetta" }, "dateModified" : "2023-05-11T09:00:00.625Z", "datePublished" : "2023-05-11T09:00:00.000Z", "headline" : "New Cactus Ransomware: A Dangerous Threat Evading Antivirus Detection", "image" : [ "https://prevent-ransomware.com/hubfs/AdobeStock_480490513.jpeg" ], "mainEntityOfPage" : { "@id" : "https://prevent-ransomware.com/blog/new-cactus-ransomware-a-dangerous-threat-evading-antivirus-detection", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://prevent-ransomware.com/hubfs/CHIPS%20&%3B%20AppGuard%20logos.png" }, "name" : "CHIPS Cyber Defense Solutions, LLC" } } ```