Connecting the Bots – Hancitor fuels Cuba Ransomware Operations
Security Affairs
MAY 7, 2021
As of April 28, the site mentioned nine companies primarily from aviation, financial, education and manufacturing industries. The blog post examines a typical Hancitor and Cuba kill chain, the threat actors’ TTPs, detailed recommendations, and mitigation techniques. Files are encrypted using ChaCha20 with 12-bytes length IV.
Let's personalize your content