Microsoft warns of new ransomware campaign by Twisted Spider group
Uses malvertising to spread Danbot Trojan, then Cactus ransomware
Image:
Microsoft warns of new ransomware campaign by the Twisted Spider group
According to a series of posts on X by Microsoft Threat Intelligence, Russia-based ransomware actor Storm-0216 (aka Twisted Spider, UNC2198) is using Danabot, an advanced banking Trojan, to deploy Cactus ransomware.
First identified earlier this year, Cactus uses tools and custom scripts to disable security software to ease the distribution of the ransomware binary. In the current campaign, Microsoft Threa…
Advertisements
To continue reading this article…
Join Computing
Already a Computing member?
Government
Deal comes at a time when Amazon and rival Microsoft face increased scrutiny from the UK competition regulator
Datacentre
But will constitute just 3% of the software giant’s total spending on datacentres in the next six years
Advertisements
