Evil Corp Switches to Ransomware-as-a-Service to Evade US Sanctions
Farewell, Hades, and hello Lockbit.
Stay updated with breaking news from Evil Corp. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Farewell, Hades, and hello Lockbit.
The cybercriminal group is distancing itself from its previous branding by shifting tactics and tools once again in an aim to continue to profit from its nefarious activity.
A notorious Russian cybercrime group has updated its attack methods in response to sanctions that prohibit US companies from paying it a ransom, according to cybersecurity researchers.
OFAC sanctioned Evil Corp in December 2019, citing the group's extensive development of Dridex malware, which the gang used to steal more than $100M.
The threat actor behind the notorious Dridex campaign has switched from using its exclusive credential-harvesting malware to a ransomware-as-a-service model, to make attribution harder.