Several ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control over compromised hosts.
« Skitnet has been sold on underground forums like RAMP since April 2024, » Swiss cybersecurity company PRODAFT told The Hacker News. « However, since early 2025, we have observed multiple ransomware operators using it
