Ransomware gang 'CrazyHunter' Targets Critical Taiwanese Orgs

Trend Micro has identified CrazyHunter, a newly emerged ransomware group focusing on Taiwanese critical sectors (healthcare, education, manufacturing). The actor heavily leverages open-source tooling (Prince Ransomware Builder, ZammoCide, SharpGPOAbuse) and employs BYOVD (loading vulnerable signed drivers) to kill security processes, escalate privileges, and move laterally; the group has posted alleged victims to a leak site. Trend Micro recommends least privilege, MFA, patching, daily backups, auditing user permissions, and endpoint protections that detect/block unauthorized driver installations.