Related Families: LockBit, LockBit 3.0
Verticals Targeted: Multiple
Executive Summary
CYFIRMA recently reported on Exfiltrator-22, also known as EX-22, a new post-exploitation framework capable of spreading ransomware while evading detection.
Key Takeaways
- Exfiltrator-22, also known as EX-22, is a new post-exploitation framework capable of spreading ransomware while evading detection.
- Exfiltrator-22, which is a framework-as-a-service, is designed to primarily target corporate networks.
- Analysts at CYFIRMA have linked Exfiltrator-22 to former LockBit 3.0 affiliates.