{"id":1239,"date":"2021-03-09T18:47:44","date_gmt":"2021-03-09T13:17:44","guid":{"rendered":"https:\/\/xiarch.com\/blog\/?p=1239"},"modified":"2021-06-07T11:02:13","modified_gmt":"2021-06-07T05:32:13","slug":"new-updated-ransomware-supports-indian-farmers-protest","status":"publish","type":"post","link":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/","title":{"rendered":"New Updated Ransomware Supports Indian Farmer\u2019s Protest!"},"content":{"rendered":"\n

A newly updated ransomware named Sarbloh that encrypts user files and they will display the message on the user screen that supports the protest of Indian Farmers.<\/p><\/p>\n\n\n\n

The Indian government issued a new set of rules and regulations and named this as \u2018Indian Agriculture Act of 2020\u2019 and also called as Farm Bills. According to the government, these bills are required to modernize the agricultural industry.<\/p><\/p>\n\n\n\n

Whereas, the Farmers believe that these new laws will make their job more challenging and hurt their livelihoods while generating revenue. This new law removed the restrictions on how the farmers selling the goods at how much they get.<\/p><\/p>\n\n\n\n

However, as this law was passed in the parliament, thousands of farmers had been protesting against the bill in New Delhi.<\/p><\/p>\n\n\n\n

Now, read the upcoming section to know why this new ransomware supports the Indian farmers?<\/p>\n\n\n\n

Why Sarbloh Supports Indian Farmers?<\/strong><\/h2>\n\n\n\n

After the detailed investigation conducted by multiple security firms that include Malwarebytes, Cyble, and QuickHeal this ransomware is named Sarbloh and spreading through Word documents that contain a message in supports of Indian Farmers.<\/p><\/p>\n\n\n\n

\"New<\/figure><\/div>\n\n\n\n

It is still not clear that how the malicious word documents are spreading. However, as the user clicks on it, the user will show a box that prompts to Enable Content to review the data correctly.<\/p><\/p>\n\n\n\n

As the user hits the button, the malware start downloads a file that is identified as putty.exe and it also uses bitsadmin.exe. The file gets downloaded to the Document folder and then it will be executed automatically. Once the file is completely executed, it will start encrypting the data and rename the encrypted files as .sarbloh.<\/p><\/p>\n\n\n\n

\"New<\/figure><\/div>\n\n\n\n

Once the software completed the encryption it will create a README_SARBLOH.txt file that holds the message and supports the farmers of India.<\/p><\/p>\n\n\n\n

\"New<\/figure><\/div>\n\n\n\n

The message reads as;<\/p>\n\n\n\n

YOUR FILES ARE GONE!!!<\/em><\/p>\n\n\n\n

THEY WILL NOT BE RECOVERABLE UNTIL THE DEMANDS OF THE FARMERS HAVE BEEN MET<\/em><\/p>\n\n\n\n

WHAT HAPPENED TO THEM?<\/em><\/p>\n\n\n\n

Using military-grade EnCryPtiOn all the files on your system have been made useless.<\/em><\/p>\n\n\n\n

India, Sikhs have long been the face against the oppression placed upon them.<\/em><\/p>\n\n\n\n

Each time we have resisted.<\/em><\/p>\n\n\n\n

Today you come for the very throats of Hindu, Sikh, and Muslim farmers by trying to take their livelihood.<\/em><\/p>\n\n\n\n

You will not succeed in your sinister ways.<\/em><\/p>\n\n\n\n

The two-sided sword of the Khalsa is at any moment’s notice. Tyaar bar tyaar.<\/em><\/p>\n\n\n\n

Wherever our blood is spilled, the tree of Sikhi uproots from there.<\/em><\/p>\n\n\n\n

If your intentions for the farmers are pure and<\/em><\/p>\n\n\n\n

you wish to help them, this is not the way.<\/em><\/p>\n\n\n\n

Halemi Raj, Sikh Raj, was not this way.<\/em><\/p>\n\n\n\n

If the laws are not repealed. Your fate is no<\/em><\/p>\n\n\n\n

different to what the Khalsa did to Sirhind.<\/em><\/p>\n\n\n\n

Waheguru Ji Ka Khalsa, Waheguru Ji Ki Fateh<\/em><\/p>\n\n\n\n

Khalsa Cyber Fauj<\/em><\/blockqoute><\/p><\/blockquote>\n\n\n\n

Summering Up<\/strong><\/h2>\n\n\n\n

According to the experts, this campaign was named after the \u2018Sarbloh Granth\u2019 a book of scriptures of Sikhism. Whereas Sarbloh is open-source ransomware that is also named Khalsa Crypt and having no known weaknesses yet. But multiple experts think that this new malware doesn\u2019t remove shadow volume, therefore it will easier to remove this from the victim’s system.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"

A newly updated ransomware named Sarbloh that encrypts user files and they will display the message on the user screen that supports the protest of Indian Farmers. The Indian government issued a new set of rules and regulations and named this as \u2018Indian Agriculture Act of 2020\u2019 and also called as Farm Bills. According to […]<\/p>\n","protected":false},"author":2,"featured_media":1246,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[15],"tags":[],"yoast_head":"\nNew Updated Ransomware Supports Indian Farmer\u2019s Protest! - Xiarch Solutions Private Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Updated Ransomware Supports Indian Farmer\u2019s Protest! - Xiarch Solutions Private Limited\" \/>\n<meta property=\"og:description\" content=\"A newly updated ransomware named Sarbloh that encrypts user files and they will display the message on the user screen that supports the protest of Indian Farmers. The Indian government issued a new set of rules and regulations and named this as \u2018Indian Agriculture Act of 2020\u2019 and also called as Farm Bills. According to […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiarch Solutions Private Limited\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xiarch\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-09T13:17:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-07T05:32:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/sarbloh-ransomware-supports-indian-farmer-featured.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Xiarch Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xiarch\" \/>\n<meta name=\"twitter:site\" content=\"@xiarch\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Xiarch Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/\"},\"author\":{\"name\":\"Xiarch Security\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\"},\"headline\":\"New Updated Ransomware Supports Indian Farmer\u2019s Protest!\",\"datePublished\":\"2021-03-09T13:17:44+00:00\",\"dateModified\":\"2021-06-07T05:32:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/\"},\"wordCount\":532,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"articleSection\":[\"Infosec News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/\",\"url\":\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/\",\"name\":\"New Updated Ransomware Supports Indian Farmer\u2019s Protest! - Xiarch Solutions Private Limited\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#website\"},\"datePublished\":\"2021-03-09T13:17:44+00:00\",\"dateModified\":\"2021-06-07T05:32:13+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/xiarch.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New Updated Ransomware Supports Indian Farmer\u2019s Protest!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/xiarch.com\/blog\/#website\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"name\":\"Xiarch Solutions Private Limited\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/xiarch.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\",\"name\":\"Xiarch\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"contentUrl\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"width\":300,\"height\":300,\"caption\":\"Xiarch\"},\"image\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/xiarch\/\",\"https:\/\/twitter.com\/xiarch\",\"https:\/\/www.linkedin.com\/company\/xiarch\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\",\"name\":\"Xiarch Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"caption\":\"Xiarch Security\"},\"sameAs\":[\"https:\/\/xiarch.com\/blog\/\"],\"url\":\"https:\/\/xiarch.com\/blog\/author\/vector\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New Updated Ransomware Supports Indian Farmer\u2019s Protest! - Xiarch Solutions Private Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/","og_locale":"en_US","og_type":"article","og_title":"New Updated Ransomware Supports Indian Farmer\u2019s Protest! - Xiarch Solutions Private Limited","og_description":"A newly updated ransomware named Sarbloh that encrypts user files and they will display the message on the user screen that supports the protest of Indian Farmers. The Indian government issued a new set of rules and regulations and named this as \u2018Indian Agriculture Act of 2020\u2019 and also called as Farm Bills. According to […]","og_url":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/","og_site_name":"Xiarch Solutions Private Limited","article_publisher":"https:\/\/www.facebook.com\/xiarch\/","article_published_time":"2021-03-09T13:17:44+00:00","article_modified_time":"2021-06-07T05:32:13+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/sarbloh-ransomware-supports-indian-farmer-featured.png","type":"image\/png"}],"author":"Xiarch Security","twitter_card":"summary_large_image","twitter_creator":"@xiarch","twitter_site":"@xiarch","twitter_misc":{"Written by":"Xiarch Security","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#article","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/"},"author":{"name":"Xiarch Security","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c"},"headline":"New Updated Ransomware Supports Indian Farmer\u2019s Protest!","datePublished":"2021-03-09T13:17:44+00:00","dateModified":"2021-06-07T05:32:13+00:00","mainEntityOfPage":{"@id":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/"},"wordCount":532,"commentCount":0,"publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"articleSection":["Infosec News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/","url":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/","name":"New Updated Ransomware Supports Indian Farmer\u2019s Protest! - Xiarch Solutions Private Limited","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/#website"},"datePublished":"2021-03-09T13:17:44+00:00","dateModified":"2021-06-07T05:32:13+00:00","breadcrumb":{"@id":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/xiarch.com\/blog\/new-updated-ransomware-supports-indian-farmers-protest\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiarch.com\/blog\/"},{"@type":"ListItem","position":2,"name":"New Updated Ransomware Supports Indian Farmer\u2019s Protest!"}]},{"@type":"WebSite","@id":"https:\/\/xiarch.com\/blog\/#website","url":"https:\/\/xiarch.com\/blog\/","name":"Xiarch Solutions Private Limited","description":"","publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiarch.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiarch.com\/blog\/#organization","name":"Xiarch","url":"https:\/\/xiarch.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","contentUrl":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","width":300,"height":300,"caption":"Xiarch"},"image":{"@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/xiarch\/","https:\/\/twitter.com\/xiarch","https:\/\/www.linkedin.com\/company\/xiarch"]},{"@type":"Person","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c","name":"Xiarch Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","caption":"Xiarch Security"},"sameAs":["https:\/\/xiarch.com\/blog\/"],"url":"https:\/\/xiarch.com\/blog\/author\/vector\/"}]}},"_links":{"self":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1239"}],"collection":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/comments?post=1239"}],"version-history":[{"count":3,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1239\/revisions"}],"predecessor-version":[{"id":1245,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1239\/revisions\/1245"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media\/1246"}],"wp:attachment":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media?parent=1239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/categories?post=1239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/tags?post=1239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}