{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"Hancitor‑Driven Cuba Ransomware: Kill Chain, TTPs, and Mitigations","description":"Hancitor botnet is now used to deliver Cuba ransomware, exploiting Windows vulnerabilities and phishing. The attack chain includes credential theft, lateral movement, and data exfiltration. Defenders should harden endpoints, block known command‑and‑control domains, and monitor for ransomware indicat","url":"https://rootpwn.me/news/hancitor-driven-cuba-ransomware-kill-chain-ttps-and-mitigations","thumbnail_url":"https://rootpwn.me/images/26d55a47899e4a5a9ff017409a109490.jpg","thumbnail_width":1600,"thumbnail_height":900}