TLDR InfoSec · MISCELLANEOUS
FIRE SALE: ZEPPELIN RANSOMWARE SOURCE CODE SELLS FOR $500 ON DARK WEB
Summary from the TLDR InfoSec newsletter
A threat actor recently sold the Zeppelin ransomware source code for just $500, potentially reviving the Russian ransomware, which has been used in the past in attacks on critical US infrastructure. Zeppelin is a VegaLocker derivative written in Delphi. The CISA and FBI released IoCs on Zeppelin TTPs in 2022. This cheap sale may signal a ransomware-as-a-service revival.