The Register reports that increased efforts by the Russian-speaking Everest ransomware gang to secure corporate network access, particularly from entities across the U.S., Canada, and Europe, suggest the operation's move to becoming an initial access broker.
Article Link: Everest ransomware operation transitioning as IAB | SC Media