A new ransomware group called Bert has been attacking organizations across Asia, Europe, and the U.S., targeting sectors like healthcare, technology, and event services. The group’s malware, which infects both Windows and Linux systems, appears to reuse elements from the dismantled REvil group and may have links to Russian infrastructure. #BertRansomware #REvil #CyberThreats
Keypoints
- The Bert ransomware group has targeted organizations globally in multiple sectors.
- It infects both Windows and Linux systems using a PowerShell script to disable security tools.
- The ransomware leaves a note demanding contact for negotiation after encryption.
- Researchers suggest Bert may have connections to Russian infrastructure and reuses REvil code.
- No specific threat actor has been conclusively linked to Bert, but evidence points to possible regional ties.
Read More: https://therecord.media/bert-ransomware-identified