# Citrus Ransomware Targets Contractors to Breach Corporate Networks

> Source: <https://osintsights.com/citrus-ransomware-targets-contractors-to-breach-corporate-networks>
> Published: 2026-11-12 09:03:10+00:00

Citrus Ransomware is exploiting vulnerable contractors to gain access to corporate networks, using stolen credentials to connect to VPNs or terminal servers and then deploying a mix of human-made and AI-generated tools to spread its reach. This clever tactic allows the attackers to blend in and evade detection, making it a formidable threat to businesses.