TLDR InfoSec · ATTACKS & VULNERABILITIES

VANHELSING RANSOMWARE BUILDER LEAKED ON HACKING FORUM

bleepingcomputer.com3 min read

Summary from the TLDR InfoSec newsletter

After a former developer for the Ransomware-as-a-Service operator VanHelsing attempted to sell the source code for the VanHelsing affiliate panel, data leak Tor sites, and builders for the Windows and Linux encryptors, VanHelsing proactively released the source code itself. The leaked source code includes the Windows encryptor, which will require modifications for other threat actors, and the source code for the affiliate panel and blog site, which can be run as is. The data VanHelsing leaked was only a subset of what the former developer attempted to sell, as it did not include any databases or the Linux builder.