BlackCat Ransomware Campaign Uses Munchkin Tool In Their Attacks

The BlackCat/ALPHV ransomware operation recently incorporated a novel tool called 'Munchkin.' This tool harnesses virtual machines for surreptitious deployment of encryptors on network devices. Munchkin empowers BlackCat to operate on remote systems and encrypt Server Message Block (SMB) or Common Internet File (CIFS) network shares remotely. The addition of Munchkin to BlackCat's already formidable arsenal enhances the appeal of their Ransomware-as-a-Service (RaaS) platform, making it a more enticing choice for cybercriminals aspiring to become ransomware affiliates. Read more...