New Yashma Ransomware Variant Targets Multiple English-Speaking Countries

An unknown threat actor is using a variant of the Yashma ransomware to target various entities in English-speaking countries, Bulgaria, China, and Vietnam at least since June 4, 2023.
Cisco Talos, in a new write-up, attributed the operation with moderate confidence to an adversary of likely Vietnamese origin.
"The threat actor uses an uncommon technique to deliver the ransom note," security

actor adversary bulgaria china cisco cisco talos countries entities june origin ransomware speaking talos target threat threat actor vietnam write-up yashma ransomware