New Charon ransomware targets Middle East public sector, aviation firms

Researchers identified a targeted ransomware strain called Charon being deployed against public sector and aviation organizations in the Middle East; the malware exhibits APT-style techniques (disabling AV, deleting backups, customized ransom notes) and shows similarities to the China-linked Earth Baxia group, though definitive attribution is unclear.