CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed - DataBreaches.Net

"New research from Trellix detailed that CrazyHunter ransomware has emerged as a serious and escalating threat, underscoring the growing sophistication of modern cybercriminal operations. Trellix has tracked the malware since its first appearance, observing rapid technical evolution and increasing activity. To date, the primary targets have been healthcare organizations in Taiwan, with six confirmed victims. Technically, CrazyHunter is a fork of the Prince ransomware that surfaced in mid-2024, but it incorporates meaningful enhancements, particularly in network intrusion methods and anti-malware evasion capabilities."

""CrazyHunter, a Go-developed ransomware, employs advanced encryption and delivery methods targeted against Windows-based machines. It uses a data leak site to publicize victim information," Aswath A, a Trellix researcher, wrote in a company blog post last week."

CrazyHunter ransomware has rapidly evolved into a serious, escalating threat with growing technical sophistication. Trellix tracked the malware since its first appearance and observed rapid technical evolution and increasing activity. Primary victims are healthcare organizations in Taiwan, with six confirmed incidents. Technically, CrazyHunter is a fork of the Prince ransomware that surfaced in mid-2024 but includes meaningful enhancements in network intrusion methods and anti-malware evasion. The ransomware is written in Go, targets Windows-based machines, uses advanced encryption and delivery methods, and exposes stolen data via a public data-leak site.

Read at DataBreaches.Net