Conversation

Russian security firm FACCT has spotted a threat actor targeting Russian companies with a leaked version of the LockBit ransomware.

https://t.me/F_A_C_C_T/3214

The most interesting part is that FACCT refers to the group using a "werewolf" moniker.

The werewolf term is typically used by Russian security firms to refer to state-sponsored groups.

https://securitymedia.org/info/vervolf-v-tayfune-klassifikatsiya-i-analiz-khakerskikh-gruppirovok.html