ctipilot.ch

Prinz Eugen — Go-based ransomware, recent-files-first, no ransom note

campaign · campaign:prinz-eugen-ransomware

Coverage timeline
1
first 2026-06-21 → last 2026-06-21
Briefs
1
1 distinct
Sources cited
3
3 hosts
Sections touched
1
deep_dive
Co-occurring entities
0
no co-occurrence

Story timeline

  1. 2026-06-21CTI Daily Brief — 2026-06-21
    deep_diveFirst coverage / deep dive. ChaCha20-Poly1305 + Argon2id KDF; RDP initial access; RemotePC RMM abuse; confirmed FR victim (Transitions Pro Centre Val de Loire).

Where this entity is cited

  • deep_dive1

Source distribution

  • bleepingcomputer.com1 (33%)
  • github.com1 (33%)
  • threatdown.com1 (33%)

Items in briefs about Prinz Eugen — Go-based ransomware, recent-files-first, no ransom note

No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.