Snatch ransomware reboots PCs into Safe Mode to bypass protection

The attackers were foiled in their attempts to contaminate machines blanketed by Sophos endpoint merchandise with the ransomware payloads, or to kill the Sophos endpoint protection services and methods on machines that were attacked. But others were not so lucky. We reached out to Coveware, a company that specializes in extortion negotiations between ransomware victims and attackers. The agency tells us they have negotiated with the Snatch criminals on 12 events between July and October on behalf of their clients. Ransom calls for in Bitcoin ranged in value from $2,000 to $35,000, but trended up over that four month period.