Black TENGU Ransomware

In our recovery lab today at Lockbit Decryptor, we isolated the Black TENGU ransomware strain, identified by the .TENGU extension and the _README_TENGU.txt note. Our forensic analysis confirms this is a variant of the Babuk ransomware family, specifically a derivative of its source code leak. This variant employs a robust hybrid cryptosystem. Critically, our analysis…