HackRead
Global Group Ransomware Abuses WinMerge to Deploy Encryptor
Global Group cybercriminals use payment-themed phishing emails delivering malicious ISO files and legitimate WinMerge tool to deploy ransomware against enterprises. Attackers establish persistence before encryption to facilitate extortion. This phishing-to-ransomware chain targets email security defenses.
AI summary · generated with Claude
https://hackread.com/global-group-ransomware-winmerge-deploy-encryptor/