Technical Analysis of Crytox Ransomware

The threat actor using Crytox ransomware has been active since at least 2020. Unlike most ransomware groups, the Crytox threat actor does not perform double extortion attacks where data is both encrypted and held for ransom.