MoscowA group calling itself VantaCore has hit at least seven Russian companies.
None of the seven has received a ransom demand, unusual for an extortion crew.
Russian security firm F6 built the attribution from its own telemetry inside the jurisdiction it reports on.
F6 has not named all seven victims or said whether any ransom will follow.
How each outlet framed it
- The Record
- links ransomware to Thor rebranded as VantaCore, tracking pro-Ukrainian hackers pivoting to profit-focused ransomware operations
Sources: The Record