Security News > 2024 > February > Knight ransomware source code for sale after leak site shuts down

Knight ransomware source code for sale after leak site shuts down
2024-02-20 16:28

The alleged source code for the third iteration of the Knight ransomware is being offered for sale to a single buyer on a hacker forum by a representative of the operation.

Knight ransomware launched at the end of July 2023 as a re-brand of the Cyclops operation, targeting Windows, macOS, and Linux/ESXi systems.

Threat analysts at cyber-intelligence firm KELA spotted the advertisement two days ago posted on RAMP forums by someone using the alias Cyclops, known as a representative of the Knight ransomware gang.

"Selling the source code for Knight 3.0 ransomware, this will include the source code of the panel and the locker, all source code is owned and written in Glong C++," says Cyclops in the post.

The reason behind selling the source code for Knight ransomware remains unclear but KELA's dark web monitoring tools have logged no activities from Knight's representatives on various forums since December 2023.

Zeppelin ransomware source code sold for $500 on hacking forum.


News URL

https://www.bleepingcomputer.com/news/security/knight-ransomware-source-code-for-sale-after-leak-site-shuts-down/