payoutsking

Key insights

• •Targets diverse sectors, including healthcare, manufacturing, and education.
• •Utilizes remote desktop protocol (RDP) access, phishing templates, and cracked panel kits for initial access.
• •Employs various malware families like Azorult and RedLine for data theft and credential harvesting.
• •Adopts a victim-centric approach, quickly disclosing compromised data on leak sites.
• •Active in both North America and Europe, with a broad geographic reach.
• •Indicates a strong financial motivation, evident in aggressive ransom demands.