NoName ransomware gang deploying RansomHub malware in recent attacks
The NoName ransomware group may now be affiliated with RansomHub after attempting to establish a reputation for more than three years by using its encryptors to target small and medium-sized enterprises across the globe.
The group employs specialized instruments referred to as the Spacecolon malware family, which they introduce into a network by means of brute-force attacks and by taking advantage of more established vulnerabilities such as EternalBlue (CVE-2017-0144) or ZeroLogon (CVE-2020-1472).
The ransomware ScRansom, which took the place of the Scarab encryptor in more recent attacks, is used by NoName. The threat actor also made an attempt to gain notoriety by utilizing identical ransom letters, constructing a data leak website, and experimenting with the disclosed LockBit 3.0...