New Buhti Ransomware Operation Relies on Repurposed Payloads

While the group doesn’t develop its own ransomware, it does utilize what appears to be one custom-developed tool, an information stealer designed to search for and archive specified file types.