Citrus Ransomware Targets Contractors to Breach Corporate Networks

Citrus Ransomware is targeting vulnerable contractors to breach corporate networks, using stolen credentials to connect to VPNs or terminal servers and then deploying a mix of human-made and AI-generated tools to spread its reach, according to reporting on the threat. The tactic lets the attackers blend in and evade detection, making Citrus Ransomware a formidable threat to businesses.