Ransom Busters Scam Targets Ransomware Victims with Fake Data Deletion Services
A threat actor calling itself 'Ransom Busters' is targeting ransomware victims with a novel extortion scheme, offering to delete stolen data from…
Tag: s5cmd
s5cmd: Data Exfiltration Tool
s5cmd is a command-line tool for interacting with cloud storage, used by Ransom Busters to exfiltrate data to cloud storage.
s5cmd: Bulk File Operations Tool
s5cmd is a legitimate command-line tool used for bulk file operations, often with cloud storage. In the attack, it was deployed to…
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Cybersecurity researchers at Huntress have identified an intrusion where an unknown threat actor used a suspected AI-generated PowerShell script to enumerate Active…