Sysdig digs up a ransomware gang in stealth for over a decade

Sysdig has discovered a Romania-based ransomware group, Rubycarp, that has been active for a decade. The group deploys a botnet using public exploits and brute force attacks, communicates via public and private IRC networks, and uses its botnet for financial gain. Rubycarp targets Laravel vulnerabilities and uses post-exploitation tools like phishing.