Snatch

Snatch is a ransomware executable that forces a Windows machine to reboot into Safe Mode before beginning its encryption process. The attackers may be using this technique to circumvent endpoint protection, which often won’t run in Safe Mode. Unlike most ransomware gangs who are primarily focused on encrypting files and asking for ransoms, the Snatch crew may also engange in data theft