Buhti Ransomware: Blacktail’s Newest Operation Affects Multiple Countries

A new ransomware operation emerges. Named “Buhti”, the operation uses the leaked code of the LockBit and Babuk ransomware families to target machines running Windows and Linux. The group was first spotted in the wild by Palo Alto Networks’ Unit 42 team in February 2023, which identified it as a Go-based Linux-targeting ransomware. Even if […]

The post Buhti Ransomware: Blacktail’s Newest Operation Affects Multiple Countries appeared first on Heimdal Security Blog.

alto babuk babuk ransomware code countries cybersecurity news february leaked linux lockbit machines networks palo palo alto palo alto networks ransomware target targeting team unit 42 windows