vendetta
Ransomware, which appears to be a rebranding of win.cuba.
source: ransomware.live1 refs →
vendetta
Vendetta is a cybercriminal group, likely a rebranding of the win.cuba ransomware, targeting enterprises for extortion.
Analyst brief
Vendetta is a cybercriminal group believed to be a rebranding of the win.cuba ransomware. This actor primarily targets enterprises, encrypting their data to demand ransom. Key TTPs include the use of ransomware tools capable of encrypting industrial control systems. Defenders should focus on maintaining offline critical backups, along with vulnerability management and network segmentation.
crime
FAQ2
How is the Vendetta cybercriminal group related to the win.cuba ransomware?
Vendetta is believed to be a rebranding of the win.cuba ransomware.
What key measures should defenders take to protect against the Vendetta actor?
Defenders should focus on maintaining offline critical backups, along with vulnerability management and network segmentation.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.