The Cuba Ransomware group has updated its malware to “optimize” execution and “minimize” unintended system behavior. Trend Micro says attacks from the group are to be expected in the next few months, likely with more updates to its malware. The threat group was inactive between November 2021 and April 2022, say researchers at Trend Micro and Elastic Security Labs. The group is likely to “target North American and European retailers and manufacturers for cryptocurrency payments,” the researchers say. A separate report suggests there may be a link between the Industrial Spy marketplace and the illicit illicit trade of business data.”]
Source: https://www.cuinfosecurity.com/cuba-ransomware-back-new-infection-techniques-a-19283