Snatch Ransomware Reboots to Windows Safe Mode to Bypass AV Tools

Clever trick to get around some AV software. Sophos’ recommendation is to make sure you don’t expose any RDP services outside of your network, for which we have a handy worklet.