Tag: March 2023

The ransomware uses ChaCha20/ECDH encryption when encrypting files, and it will not append any extension, although this can change depending on the victim.

The vulnerability has been used in recent attacks, including a 3CX supply chain and a Zloader malware distribution campaign in January.