Prince Ransomware – An Automated Open-Source Ransomware Builder Freely Available on GitHub

The report describes the use of the open-source Prince Ransomware builder to create the CrazyHunter ransomware that disrupted Mackay Memorial Hospital operations by encrypting more than 600 devices following USB initial access and lateral movement; attackers also used tools for GPO abuse, data exfiltration, and BYOVD to disable security, illustrating how publicly available offensive tooling enables low-skilled actors to mount high-impact ransomware attacks.