The Babuk ransomware builder appears on VirtuTotal, adding to the gang’s reputation for confusion. The builder used to create the ransomwares unique payloads and decryption modules. Babuk operators were always a bit fickle in their communications. One moment they would announce something, only to delete it shortly after and issue a new statement. It is hard to fathom why RaaS customers would be interested in working with Babuk. Extortion by threatening to release stolen data does not require the same specialized knowledge.”]