RomCom Group’s Underground Ransomware Exploits Microsoft Zero-Day Flaw

A new ransomware variant named Underground, linked to the Russia-based RomCom group, encrypts files on victims’ Windows machines and demands a ransom for decryption. It has been active since July 2023.