raptum46 Ransomware

In our recovery lab today at Lockbit Decryptor, we isolated the Raptum ransomware strain, a confirmed variant of the MedusaLocker family. This variant appends the .raptum46 extension (with a variable number) and employs a double-extortion model, threatening to leak stolen data on a TOR blog. Our forensic analysis indicates that despite their claims of strong…