Citrus Ransomware Targets Contractors to Breach Corporate Networks

Citrus Ransomware is targeting vulnerable contractors to breach corporate networks, using stolen credentials to connect to VPNs or terminal servers and then deploying a mix of human-made and AI-generated tools to spread its reach, according to reporting on the threat. The tactic lets the attackers blend in and evade detection, making Citrus Ransomware a formidable threat to businesses.

Citrus Ransomware is exploiting vulnerable contractors to gain access to corporate networks, using stolen credentials to connect to VPNs or terminal servers and then deploying a mix of human-made and AI-generated tools to spread its reach. This clever tactic allows the attackers to blend in and evade detection, making it a formidable threat to businesses.