A malicious toolset dubbed Spacecolon is being deployed as part of an ongoing campaign to spread variants of the Scarab ransomware across victim organizations globally.
« It probably finds its way into victim organizations by its operators compromising vulnerable web servers or via brute forcing RDP credentials, » ESET security researcher Jakub Souček said in a detailed technical write-up