At the beginning of the year, our Malware Lab came across a malicious sample capable of performing two actions: encrypting files and stealing data.
Two malware families were the authors of the attacks: DJVU (a variant of STOP) and Vidar.
The fact that DJVU samples often have the ability to download and distribute infostealers suggests that the threat actors are working together.
If you wish to learn more, here is the link to our full report.
In addition, you can subscribe to the specific mailing list Cyber Studios by Tinexta Defence, to receive updates on upcoming research: https://tinextadefence.it/mailing-list-cyber-studios/