Interlock and Rhysida Ransomware Operations Share Supper Backdoor and Malware Codebase

Two active ransomware operations, Interlock and Rhysida, have been linked by IBM X-Force research that found they share a private backdoor named Supper and exhibit significant code and tooling overlap. The report describes infection chains using trojanized installers, traffic distribution systems, and fraudulent code signing, highlights post-compromise activity and exploited CVEs, and provides detailed IoCs (IPs, domains, file hashes) and detection recommendations for impacted sectors including healthcare, education, and government.