Carbanak Banking Malware Resurfaces with New Ransomware Tactics

**Carbanak resurgence and ransomware trends (Nov 2023):** The report details that the Carbanak banking malware has been observed resurfacing in ransomware campaigns using updated tactics—notably distribution via compromised websites impersonating business software (e.g., HubSpot, Veeam, Xero)—and situates this within a November 2023 spike in ransomware activity (442 attacks), with LockBit, BlackCat, and Play accounting for a large share of incidents; it also notes exploitation of Windows CLFS vulnerabilities for privilege escalation by ransomware operators.