
Citrus ransomware uses VLESS, Sn00py, and LLM-written attack scripts
Kaspersky says the new group enters via contractor VPN or RDP logins, then tries Certighost and an old print-spooler bug.
1 stories, newest first · one card per story

Kaspersky says the new group enters via contractor VPN or RDP logins, then tries Certighost and an old print-spooler bug.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views