Recent TZW Campaigns Revealed As Part of GlobeImposter Malware Family
released on 2023-02-16 @ 02:06:48 PM
AhnLab’s research revealed a ransomware campaign they referred to as “TZW” with victims in South Korea. The name is derived from the first 3 characters of the TOR-based victim portal. A closer look suggests that “TZW” samples represent a new variant of the GlobeImposter family.