Iran-Linked Pay2Key Ransomware Group Re-Emerges

(Phil Muncaster – Infosecurity Magazine) Security experts have warned that an Iranian ransomware group has returned with enhanced evasion, execution and anti-forensics capabilities. Previously linked to Tehran and usually targeting victims aligned with the regime’s interests, Pay2Key has been active since 2020. However, a new report from Halcyon and Beazley Security warned that “recent US-Iran tensions appear to have accelerated activity from the group.”- The report dissected a new attack on a US healthcare provider which appeared to show an evolving set of TTPs. – Iran-Linked Pay2Key Ransomware Group Re-Emerges – Infosecurity Magazine