BleepingComputer Play ransomware gang uses custom Shadow Volume Copy data-theft tool

[BleepingComputer]

Play ransomware gang uses custom Shadow Volume Copy data-theft tool


The Play ransomware group has developed two custom tools in .NET, namely Grixba and VSS Copying Tool, which it uses to improve the effectiveness of its cyberattacks. [...]


https://www.bleepingcomputer.com/news/se...heft-tool/