Operators behind Ryuk strain of ransomware are increasingly relying on a malware-as-a-service tool to deliver the malware. The Buer loader is an alternative to the Emotet and Trickbot botnets, according to the security firm Sophos. The loader is available for rent for a flat fee of $350, which included some customization and access to the command-and-control servers’ IP address. Ryuk activity has surged since the end of the third quarter, an incident response firm says.”]
Source: https://www.cuinfosecurity.com/ryuk-ransomware-delivered-using-malware-as-a-service-tool-a-15258