embargo

Key insights

• •Known for double extortion tactics, where both encryption and data exfiltration pressure victims for ransom.
• •Targets include healthcare institutions, demanding ransoms as high as $10 million.
• •Exploits zero-day vulnerabilities and utilizes custom Rust-based malware to facilitate attacks.
• •Observes supply chain attack methodologies, compromising third-party services to reach clients.
• •Employs living-off-the-land techniques to evade detection, relying less on traditional malware.