Fire Sale: Zeppelin Ransomware Source Code Sells for $500 on Dark Web

Researchers observed a RAMP forum user operating as "RET" offering and reportedly selling the source code and a cracked builder for Zeppelin2 ransomware for $500. Zeppelin, a Delphi-derived ransomware used against US businesses and critical infrastructure since 2019, had declined in activity after Unit221B released a decryption capability for earlier flawed versions. KELA noted only a screenshot of the code was shown, leaving authenticity unclear, but warned a purchaser could reuse or resurrect the strain, potentially reviving RaaS operations.