Zeppelin ransomware source code sold for $500 on hacking forum

A threat actor on a cybercrime forum offered the Zeppelin ransomware source code and a cracked builder for $500, claiming to have cracked the builder and intending a single-buyer sale; this could enable new RaaS operations or forks of the Zeppelin family. The report notes Zeppelin's history as a Delphi-based Vega/VegaLocker derivative used in double-extortion campaigns, prior cryptographic flaws that allowed a decrypter, and the seller's assertion that version 2 fixes those vulnerabilities.