A new threat actor that appears to be of Vietnamese origin has emerged wielding a custom version of the Yashma ransomware that’s poised to hit targets in various English-speaking countries, Bulgaria, China, and Vietnam. Researchers from Cisco Talos discovered the as-yet-unknown actor deploying a variant of Yashma in a campaign characterized by uniquely evasive ways to store and deliver its ransom note that they believe began in early June, they revealed in a blog post published Aug.

Source: Dark Reading: Cloud