5/6/26 The VECT 2.0 ransomware operation inadvertently turns into a destructive wiper rather than a recoverable extortion tool. According to researchers, files larger than 131KB are effectively destroyed because the malware discards critical encryption data during execution, meaning even attackers cannot restore victim data after payment.
CISOs need to be aware that a traditional ransomware response playbook that relies on negotiation is inadequate as adversaries increasingly utilize industrialized ransomware ecosystems paired with immature or AI-assisted tooling that can create unpredictable and potentially more destructive outcomes than operators themselves intend.
Paramount to combat this threat is operational resilience – immutable offline backups, tested recovery procedures, rapid containment, and segmentation to limit spread to name a few.
https://thehackernews.com/2026/04/vect-20-ransomware-irreversibly.html