Operators behind the Ryuk strain of ransomware are increasingly relying on a malware-as-a-service tool to deliver the malware. The Buer loader is a tool that provides initial compromise of targets’ Windows devices and enables the threat actors to establish a digital foothold within a network. The loader is available for rent for a flat fee of $350, which included some customization and access to the command-and-control servers’ IP address. Ryuk activity has surged since the end of the third quarter, a CEO of incident response firm Coveware says.”]
Source: https://www.databreachtoday.com/ryuk-ransomware-delivered-using-malware-as-a-service-tool-a-15258