Ransomware-as-a-service provider BlackMatter has ceased operations due to pressure from local authorities, research group vx-underground says. Cybersecurity expert: “This looks like a classic rebranding or splintering” Cybersecurity experts believe that the group may only be trying to distance itself from existing activities and infrastructure. An affiliate of the group uses a custom data exfiltration tool for its attacks, according to Symantec researchers. The tool is designed to steal specific file types from a number of selected directories and upload them to attacker-controlled servers.”]
Source: https://www.govinfosecurity.com/blackmatter-claims-to-shut-ops-experts-suspect-rebranding-a-17848