Novel News on Cuba Ransomware: Greetings From Tropical Scorpius

According to Unit 42, the gang is using new TTPs including a malware called ROMCOM RAT, a local privilege escalation exploit, a new Kerberos tool called KerberCache, a kernel driver for targeting security products, and the ZeroLogon hack tool.