The Register reports that increased efforts by the Russian-speaking Everest ransomware gang to secure corporate network access, particularly from entities across the U.S., Canada, and Europe, suggest the operation’s move to becoming an initial access broker. Aside from promoting a significant portion of profits from attacks facilitated by network access, which could be given through RDP, AnyDesk, and TeamViewer, to corporate insiders, Everest ransomware was noted to have pledged complete transparency on operations and confidentiality on its dark web site.

Source: SC Magazine