Russia’s FIN7 is peddling its EDR-nerfing malware to ransomware gangs

Prolific Russian cybercrime syndicate FIN7 is using various pseudonyms to sell its custom security solution-disabling malware to different ransomware gangs. AvNeutralizer malware was previously thought to be solely linked to the Black Basta group, but fresh research has uncovered various underground forum listings of the …

[beast666]

If you look into the members of SentinelLabs you will find it hard to trust any conclusions of provenance they come to.

[fajensen]

What if I don't hare off into a google blackhole and instead you simply explained your reasoning about those members of SentinelLabs?

[Gene Cash]

> If you look into the members of SentinelLabs you will find it hard to trust any conclusions of provenance they come to.

[Citation Needed]

[Pascal Monett]

AvNeutralizer

No prize for guessing which AV they started to fully dismantel first.

I'm betting Windows gets pwned 100% of the time, whatever the version.

[Tron]

Wrong MO.

Move the focus from the software to the hackers. Classify them as terrorists, because that is what they are: people who take down your infrastructure and damage lives. Identify them, target them, erase them. This is why we have special forces. Use them.