Dark Web Profile: Termite Ransomware

Termite Ransomware is an emerging late-2024 ransomware actor, likely derived from modified Babuk code, that uses data exfiltration and double-extortion (Tor-based leak site) to pressure victims; the report highlights a high-profile November 2024 attack on Blue Yonder claiming 680GB of stolen data, links to Cleo-related exploits, mapped MITRE ATT&CK TTPs, global victimology, and mitigation recommendations including patching, segmentation, backups, EDR, and incident response.