Phobos

Phobos is a Ransomware-as-a-Service (RaaS) first seen in 2019, and is a variant of the Dharma (CrySiS) ransomware family. It is often distributed through exposed RDP connections. It creates a global mutex to prevent multiple instances of the malware from running.