Last Week in Ransomware: 09.02.2024

**Ransomware news roundup:** Recent activity includes a Qilin campaign that harvested VPN credentials from Chrome via a logon-based GPO deploying PowerShell and batch scripts, Hunters International threatening to publish 386 GB of alleged U.S. Marshals data as part of double-extortion tactics, and RansomHub being connected to a disruptive attack on Halliburton; the report highlights RaaS affiliate models, targeted sectors, operational impacts, and extortion demands.