Alerts Events DCR

Go to listing page

RedCurl Threat Group Create QWCrypt Ransomware to Target Hyper-V Virtual Machines

Threat Actors
March 27, 2025
Bleeping Computer

While most ransomware operations focus on VMware ESXi servers, RedCurl's new QWCrypt ransomware specifically targets virtual machines hosted on Hyper-V. Bitdefender observed attacks involving phishing emails with ".IMG" attachments disguised as CVs.

RedCurl
Ransomware Encryptor
Ransomware Attacks
QWCrypt Ransomware
Hyper-V

Publisher