Report: Ransomware attack disrupts Georgia’s court system

Termite — which has already compromised seven victims, two of which are in the U.S. — was regarded by Cyble researchers to be a Babuk ransomware rebrand due to significant similarities between both strains' ransomware binaries.

Well-known online forums have been leveraged to spread the cracked software, which was claimed by threat actors to function only if targets would deactivate their antivirus systems, according to a Kaspersky analysis.

Venom Spider leveraged the VenomLNK tool to facilitate initial access in both campaigns, the first of which involved the tool being used to show a decoy PNG image while executing RevC2, which enabled Chromium browser cookie and credential exfiltration, shell command execution, screenshot capturing, and traffic proxying, according to an analysis from Zscaler ThreatLabz.