Iranian ransomware crew reemerges, promises big bucks for attacks on US or Israel

Pay2Key.I2P, an updated Pay2Key ransomware-as-a-service with links to Iran's Pioneer Kitten and shared capabilities with Mimic ransomware, has resurfaced after a five-year hiatus and is actively targeting US and Israeli organizations. The group advertises higher payouts for attacks against those countries, hosts leak sites on the I2P network, added a Linux build, and claims roughly $4 million in proceeds from about 50 ransom payments.