AvosLocker: A New Sophisticated Ransomware Group

This Cyble Research Labs report profiles AvosLocker, an active Windows ransomware gang (since June 2021) that encrypts files with the .avos extension using AES-256, distributes via phishing/spam and malvertising, publishes stolen data on an .onion leak site, and provides a Tor-based payment portal with test-decryption and support features; the report includes IoCs, MITRE ATT&CK mappings, a victim timeline, and operational/mitigation recommendations.