Ankura CTIX FLASH Update - July 22, 2022

Ransomware/Malware Activity

Redeemer 2.0 Ransomware Builder Released on Hacking Forums for Unsophisticated Actors

"Redeemer", a ransomware builder produced by "Cerebrate" who provides Ransomware-as-a-Service (RaaS) operations, has been recently updated to version 2.0. Cerebrate's services are generally promoted to unsophisticated threat actors on hacking forums. Redeemer 2.0 is written in the C++ programming language and can be used on Windows Vista, 7, 8, 10, and 11. This operation is unlike many others since the ransomware itself is free of charge, though Redeemer's developer receives a 20% cut of ransoms paid from attacks using the ransomware. This is achieved through a new campaign ID tracking system, which facilitates affiliates to track various campaigns as well as set a specific ID to the executable to ensure the integrity of the set ransom amount in Monero. Redeemer's operator also "shares the master key to be combined with the private builder key held