Big Game Hunting: Now in Russia

Group-IB describes OldGremlin, a Russian-speaking criminal group conducting multistage targeted ransomware attacks across Russian corporate networks using spearphishing (malicious LNK/SFX), custom backdoors (TinyNode, TinyPosh), Cobalt Strike for post-exploitation and lateral movement, and TinyCryptor to encrypt systems after wiping backups; the report includes MITRE ATT&CK mappings and concrete IoCs (file hashes, registry keys, IPs/domains).