GandCrab v4.1 in the wild first Windows XP and Server 2003 impacting ransomware ransomware SMB worm GandGrab 4 landed this month. It no longer needs a C2 server (it can operate in airgapped environments) and it now spreads via an SMB exploit. As far as Im aware, this is the first ransomware true worm which spreads to XP and 2003. It also appears to hunt unpatched Windows systems, and has a 24/7 support service.”]