Its versatility and relative ease of use ensures that-sadly-we’ll likely be seeing Babuk lurking at the edges of ransomware development for a long time to come. The leaked builder has proven to be very useful for those in the ransomware realm, and people wanting to get in on the act. Babuk code has also been reused prior to this latest group, for example as the basis for Rook ransomware at the end of 2021. Babuk popped up in all sorts of attacks, like being deployed via Microsoft Exchange exploits. While some of these antics may sound faintly comical, the ransomware was no joke.
Researchers from Cisco Talos have named this new team the “RA Group”, a ransomware collective which may have only been up and running since last month.īabuk famously threatened to leak law enforcement data, relented, and then had its ransomware builder tool leaked during the weirdest retirement ever.
The bones of long gone ransomware group Babuk continue to rattle in the breeze, in the form of reused code.
0 kommentar(er)
