As cited
Copy frozen at (site build).
ransomware
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
DevMan operators maintain a web portal that enables affiliates to build ransomware payloads, track earnings, and manage victim information. The Swiss cybersecurity firm PRODAFT tracks the operation under the threat actor name Funky Mantis and reports that the platform centralizes multiple ransomware-as-a-service functions in one location.
Why it matters: Organizations are at risk from an increasingly organized ransomware operation with distributed affiliate models; security practitioners should monitor for DevMan/Funky Mantis campaigns and implement detection for this RaaS tooling.
- Source published
- First seen by Cybersecurity Tracker