Aliases: No associated aliases
Microsoft Defender Antivirus detects and protects this threat.
This ransomware encrypts the data on your disk and can stop you from using your device or accessing your data. It encrypts files, renders them inaccessible, and demands payment for the decryption key.
Cuba is a family of ransomware tracked as DEV-0671, which uses a combination of Exchange vulnerabilities, PowerShell scripts, and legitimate remote management software to deploy the ransomware payload onto compromised device. Cuba ransomware, like many other Ransomware-as-a-Service (RaaS) groups, encrypts files, exfiltrates data, and threatens to release them if the ransom demand is not met.
For more information about ransomware, read this article:
Microsoft Defender Antivirus automatically removes threats as they are detected. If you have cloud-delivered protection, your device gets the latest defenses against new and unknown threats. If you don't have this feature enabled, update your antimalware definitions and run a full scan to remove this threat.
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.