A new ransomware strain called Charon has been used in targeted attacks against government and aviation organizations in the Middle East, showing sophisticated APT-like tactics. The campaign shares similarities with the China-linked group Earth Baxia, raising concerns about the adoption of advanced techniques by ransomware operators. #Charon #EarthBaxia
Keypoints
- Charon ransomware targets public sector and aviation groups in the Middle East.
- The malware disables security measures and deletes backups before encrypting data.
- Each ransom note is tailored to the victim, indicating deliberate targeting.
- The campaign shares tactics with the China-linked group Earth Baxia, but attribution remains uncertain.
- Researchers warn that the adoption of APT-level techniques by ransomware groups increases operational risks.
Read More: https://therecord.media/charon-ransomware-targeting-middle-east-aviation