RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment

The Russian-speaking hacking group called RedCurl has been linked to a ransomware campaign for the first time, marking a departure in the threat actor's tradecraft. The activity, observed by Romanian cybersecurity company Bitdefender, involves the deployment of a never-before-seen ransomware strain dubbed QWCrypt. RedCurl, also called Earth Kapre and Red Wolf, has a history of orchestrating

Posted from: Click here for the full article.

留言

此網誌的熱門文章

New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users

Microsoft Expands Free Logging Capabilities for all U.S. Federal Agencies

New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT