SharpRhino malware targets IT admins – Hunters International gang suspected

Quorum Cyber discovered SharpRhino, a C# malware trojan distributed via typo-squatted Angry IP Scanner installers attributed to Hunters International; the malware achieves persistence via registry changes, communicates with multiple C2 servers, exfiltrates data and encrypts files with a Rust-based encryptor as part of a double-extortion ransomware campaign, and Hunters International has claimed many global attacks.