CheckPoint cybersecurity experts: The malware hits large companies, but asks "little" ransom. It appears to be developed from scratch. It’s detected by a single Virus Total engine.
Joint analysis by Malwarebytes and HYAS cyber security experts: Significant similarities between the registration information for domain names used in their infrastructure by both groups.
FireEye cyber security experts found two RAR archives on VirusTotal. The trojan (aka FIN7, Anunak or Cobalt) is one of the most dangerous that belongs to cybercrime.