Ransomware gang behind Avaddon has created a dedicated leak site for publishing leaks. The gang behind the Avaddon ransomware has listed one victim, a construction firm, from which 3.5 MB of allegedly stolen documents have been leaked. The operators of Avaddon have also been continuing to recruit new affiliates, which refers to attackers who receive a personalized version of the ransomware tied to a unique affiliate ID, then share profits with the operators whenever a victim pays a ransom. Avaddon is the latest malware to use Excel spreadsheets with malicious macros to spread the ransomware.”]
Source: https://www.cuinfosecurity.com/avaddon-ransomware-joins-data-leaking-club-a-14809