An attacker logged into the honeypot and dropped/ran Zeppelin within 5 minutes of logging in. Zeppelin is from the VegaLocker/Buran family. More info can be found at cylance.com and bleepingcomputer.com. According to bleepingcomputer, affiliates earn 75% of the ransom payment while the operators would earn 25%. Here’s some info from the attack. Attacker logged in...
The post Zeppelin Ransomware appeared first on Wilbur Security.
Article Link: https://www.wilbursecurity.com/2020/03/zeppelin-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=zeppelin-ransomware