Russian-Speaking Hacker Group RedCurl Shifts to Ransomware Attacks

The Russian-speaking hacker group RedCurl, also known as Earth Kapre and Red Wolf, has been linked for the first time to a ransomware campaign, marking a shift in its methods. This activity, observed by the Romanian cybersecurity company Bitdefender, involves the deployment of a new strain of ransomware called QWCrypt. RedCurl, traditionally involved in espionage operations, has thus expanded its scope by incorporating ransomware attacks.