Lorenz Ransomware Gang Plants Backdoors to Use Months Later

During an incident response engagement to a Lorenz ransomware attack, researchers at S-RM determined that the hackers had breached the victim network five months before starting to move laterally, steal data, and encrypt systems.