Inhibit System Recovery T1490
Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery. This may deny access to available backups and recovery options. Operating systems may contain features that can help fix corrupted systems, such as a…
- Tactics
- Impact
- Actors using it
- 7
- Sub-techniques
- 0
Ransomware groups reported using it
N0nakiraplayeverestpayloadMajinahanashiOrovasarcomaclop
Threat actors
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- BlackByteHecamede · 44 techniques
- Storm-050134 techniques