Researchers are alerting people to a flaw in the VECT 2.0 ransomware’s handling of encryption nonces, which causes it to irreversibly delete larger files instead of encrypting them.
One of the most recent versions of BreachForums featured an advertisement for VECT that invited registered users to become affiliates and sent access keys to individuals who expressed interest via private messages.
The threat organization behind the recent supply-chain attacks on Trivy, LiteLLM, and Telnyx, as well as an attack on the European Commission, was partnered with VECT operators at one point.
VECT operators declared in the release that their objective was to carry out broader supply-chain assaults against other companies and to take advantage of victims of those supply-chain breaches by installing ransomware payloads in their environments.
Although this is intended to speed up encryption for larger files read more about Broken VECT 2.0 ransomware acts as a data wiper for large files.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.