Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals

Void Rabisu, a threat actor associated with the RomCom backdoor, was thought to be driven by financial gain because of its ransomware attacks. But the use of the backdoor in recent attacks shows a change in its motives since at least October 2022.