New Ransomware Strains From Leaked Conti Code

This Cyble report describes several emerging ransomware strains built from leaked Conti source code—ScareCrow, BlueSky, Meow, and a new group called Putin Team—providing technical analysis of the Putin binary (SHA256 provided), observed behaviors (ChaCha20 encryption, .PUTIN extension, file enumeration, mutex, use of Telegram and onion sites for extortion), multiple IOC hashes, and recommended defensive measures.