New Ransomware Campaign “TZW” Linked to GlobeImposter Targets South Korean Organizations

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

A new ransomware campaign called TZW is affecting organizations in South Korea. The campaign is linked to the known malware family GlobeImposter, suggesting that the actors behind GlobeImposter are rebranding and updating their payloads to obfuscate their identity and sidestep crackdowns.