Unlike the broader reach of VegaLocker family attacks geared toward Russian speakers, the threat actors behind Zeppelin are running a precision campaign, targeting high-profile technology and healthcare companies in western countries. This model not only allows people who don’t know how to create ransomware to be become attackers, it also means that similar strains can be run by entirely different people. The VegaLocker family appears to be an example of an increasingly common Ransomware-as-a-service (RaaS), in which cybercriminals create ransomware, and either sell it to others or rent it and take a portion of any bounty collected when it is used in a successful attack. First spotted in November 2019, Zeppelin has been targeting primarily large companies in Europe and the United States. Zeppelin is an example of well-organized threat actors, as those behind Zeppelin have been incredibly strategic in carefully targeting these ransomware attacks. Zeppelin is the latest member of the VegaLocker ransomware family, which also contains strains like Jamper, Storm, or Buran.
0 kommentar(er)
