Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

Avatar
Threat actors deploying the Black Basta and CACTUS ransomware families have been found to rely on the same BackConnect (BC) module for maintaining persistent control over infected hosts, a sign that affiliates previously associated with Black Basta may have transitioned to CACTUS. “Once infiltrated, it grants attackers a wide range of remote control capabilities, allowing them to execute
[[{“value”:”Threat actors deploying the Black Basta and CACTUS ransomware families have been found to rely on the same BackConnect (BC) module for maintaining persistent control over infected hosts, a sign that affiliates previously associated with Black Basta may have transitioned to CACTUS.
“Once infiltrated, it grants attackers a wide range of remote control capabilities, allowing them to execute”}]] The Hacker News 

Total
0
Shares
Previous Post

Dark Caracal group might have refreshed its malware, researchers say

Next Post

Catalan court orders former NSO Group executives be indicted for spyware abuses

Related Posts