Ransomware Hackers Built Their Own C2 Framework to Steal Passwords and Kill Security Tools

A newly analyzed server linked to the ransomware group The Gentlemen contained a previously undocumented command-and-control (C2) framework called TukTuk, tools designed to disable endpoint security products, and data believed to have been stolen from two global companies. Threat intelligence researchers identified the server at IP address...