CERT-UA Warns of Cuba Ransomware Affiliate Targeting Ukraine

The researchers associated the use of the RomCom backdoor with threat actor Tropical Scorpius (aka UNC2596), tracked by CERT-UA as UAC-0132, which is responsible for the distribution of the Cuba Ransomware.