Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le novembre 11, 2026, 12:00:16

Titre: [SecList]Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
Posté par: igor51 le novembre 11, 2026, 12:00:16

Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand

We break down the Citrus Ransomware group's attacks: the attackers' TTPs and tooling, including VLESS traffic tunneling and LLM use, plus their links to Toy Ghouls.
Source: Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand (https://securelist.com/citrus-ransomware/121879/)