Ransomware Affiliate Keeps Ransom Profits, Exposes Server with Hacking Tools

A ransomware affiliate kept ransom profits for themselves instead of sharing with the ransomware operators. An attacker left a server exposed that contained their hacking tools and traces of an intrusion they had conducted. The security notice also mentions that malicious code was discovered in developer packages and extensions. The article highlights trust issues among cybercriminals and security failures on the attacker side.