Robuta

https://news.sophos.com/en-us/2025/05/20/a-familiar-playbook-with-a-twist-3am-ransomware-actors-dropped-virtual-machine-with-vishing-and-quick-assist/ A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and... Another adversary picks up the email bombing / vishing Storm-1811 playbook, doing thorough reconnaissance to target specific employees with fake help desk... familiar playbooktwistactors https://news.sophos.com/en-us/2021/10/04/atom-silo-ransomware-actors-use-confluence-exploit-dll-side-load-for-stealthy-attack/ Atom Silo ransomware actors use Confluence exploit, DLL side-load for stealthy attack –... A new ransomware operator uses stealthy techniques, but borrows heavily from other players. ransomware actorsdll sideatom