Robuta

https://securityaffairs.com/175701/cyber-crime/ransomhub-affiliate-uses-custom-backdoor-betruger.html
Symantec linked a custom backdoor, called Betruger, found in recent ransomware attacks to an affiliate of the RansomHub operation.
ransomhubaffiliateusescustombackdoor
https://ground.news/article/ransomhub-affiliate-leverages-multi-function-betruger-backdoor-help-net-security
A RansomHub affiliate is leveraging a new multi-function backdoor dubbed Betruger to perform various actions during their attacks, Symantec researchers have...
help net securitymulti functionransomhubaffiliatebetruger