6-Year Ransomware Campaign Targets Turkish Homes & SMBs

Researchers identified a long-running, Turkey-focused ransomware campaign that uses phishing to distribute a modified Adwind Java RAT which performs locale/geofence checks, disables Windows security features, achieves persistence, and deploys a ransomware plug-in called JanaWare; attackers demand small ransoms ($200–$400) at scale targeting individuals and SMBs, allowing the operation to remain under the mainstream radar while generating steady revenue.