CHARON

CHARON is a ransomware that emerged in July 2025, known for its sophisticated file encryption techniques and anti-EDR capabilities. It uses variable encryption patterns based on file size and creates a malicious service (WWC) as part of its persistence strategy. The ransomware terminates backup services and processes to prevent recovery attempts.