Changing the password gives REvil complete control over your system for its nefarious purpose.
The notorious REvil ransomware has refined its attack vector once again to change the victim’s login password in order to reboot the computer into Windows Safe Mode. While malicious groups are always updating their attack methodology to counter security measures, the threat actors behind the REvil ransomware are particularly adept at honing their malware to make their attack campaigns more efficient.
