China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
Chinese-linked threat actor Storm-1175 transitions to proprietary ransomware strain targeting N-central systems.
Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary's previous use of Medusa ransomware, the Micro...
The Hacker News
Source
Generated insight by OnAirToday AI
The shift to proprietary tooling suggests that threat actors are moving away from commodity ransomware to avoid detection by security heuristics. This development highlights the growing sophistication of state-linked groups using commercial software vulnerabilities to facilitate custom cyber-extortion campaigns.
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.