China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

A China-linked threat actor known as Storm-1175 has been found using a new ransomware strain called StormEncryptor. This marks a change from the group's previous use of Medusa ransomware. StormEncryptor is a C++-based ransomware that appends the .encrypted file extension to affected files. The Microsoft Threat Intelligence Team disclosed this information, noting the shift in the adversary's tactics. The deployment of StormEncryptor is likely linked to the exploitation of a vulnerability in N-central.