GuidePoint Security identified a threat actor using a Python-based backdoor to persistently access breached endpoints and release RansomHub encryptors across compromised networks. The backdoor was first documented by ReliaQuest in February 2024, with GuidePoint noting updates in a later version. The Python backdoor forms a cornerstone of the command-and-control infrastructure, facilitating strong lateral movement and indicating a high coding proficiency or AI-assisted coding. Ransomware affiliates continue to exploit such backdoors.
Digital currency adoption on the rise
The adoption rate of digital currencies has surpassed that of mobile phones and the internet, with global users of digital assets surpassing 300 million, according
