nitrogen

Key insights

• •Utilizes malvertising campaigns to trick users into downloading compromised software.
• •Implements double-extortion tactics, encrypting data and threatening to leak sensitive information.
• •Employs custom loader malware and well-known tools like Cobalt Strike for persistence and lateral movement.
• •Encrypts files with a .nba extension, rendering recovery impossible due to flaws in its cryptographic implementation.
• •Targets various sectors including healthcare, manufacturing, and education.