Initial access hackers switch to Tsundere Bot for ransomware attacks

Published on January 28, 2026

A prolific initial access broker tracked as TA584 has been observed using the Tsundere Bot alongside XWorm remote access trojan to gain network access that could lead to ransomware attacks. [...]