INTERLOCK RANSOMWARE DEPLOYS NEW NODESNAKE RAT IN UK ATTACKS

Summary from the TLDR InfoSec newsletter

The Interlock ransomware group has deployed a Remote Access Trojan (RAT) called NodeSnake in attacks on two UK universities over two months. NodeSnake enables attackers to control infected computers, access files, monitor activity, and install additional malware while remaining undetected. It emerged in September 2024 and previously targeted large organizations in North America and Europe. Interlock now focuses on educational institutions and local governments, possibly to steal intellectual property and test new attack methods.