threat-intel
Ransomware crook poses as recovery firm to steal payments from fellow extortionists
Medium
Summary
A Russian threat actor is impersonating Signal support to conduct phishing attacks targeting other ransomware groups. The goal is to steal payments intended for extortion activities, highlighting a concerning trend of organized crime leveraging social engineering tactics within the ransomware ecosystem.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data