Ransomware-as-a-Service derived from Hidden Tear, sold by DevBitox on the dark web.
Analysis by Recorded Future: Karmen Ransomware Variant Introduced by Russian Hacker
Recorded Future on Hidden Tear
Commentary by John Leyden for The Register: Profit with just one infection! Crook sells ransomware for – Nifty dashboard shows the bitcoin rolling in
*Carmen (the opera)
Here’s another article by Josep Albors and myself for ESET: Spanish Harmada: more on tech support scams. Excerpt:
‘After our recent joint blog Support scams now reign in Spain, Josep Albors was contacted by a Spanish online newspaper asking for further information and general commentary. So here, first, is my general commentary on the evolution of the tech support scam and why the current high incidence of reports in Spain (and, to a lesser extent, other parts of the world) is so significant. The subsequent article in El Confidencial can be found here (in Spanish).’