Hundreds of players were allegedly targeted via screen-capture malware MeshAgent spread through third-party multi-tabling tools, with millions of dollars reportedly stolen.
Huntress reports new Settra ransomware hit retail and manufacturing firms, using MeshAgent RMM, BYOVD, and Windows utilities to encrypt systems and block recovery.
Huntress details a new Settra ransomware variant deployed against retail and manufacturing victims since June, using MeshAgent RMM, recovery sabotage, and BYOVD techniques.
New SETTRA ransomware operation abuses MeshAgent RMM for persistence, BYOVD via gdrv.sys, log clearing, and Windows recovery sabotage to encrypt systems.
Huntress details two Settra ransomware incidents where attackers deployed MeshAgent RMM and BYOVD before encrypting files.