Tag: Play

Nov 27

Play ransomware infection routine

By Christopher GLEMOT in Backup, CERT, Ransomware, SOC

A ransomware gang named “Play” was discovered on the Dark Web. Along with them, a list of 22 victims has been revealed. There is a piece of evidence that points to a possible connection between Play ransomware and Quantum ransomware, which is an offshoot of the notorious Conti ransomware group. The Cobalt Strike beacons that …