Reynolds is a ransomware group that emerged in February 2026, distinguishing itself by embedding a Bring Your Own Vulnerable Driver (BYOVD) component directly within its ransomware payload, rather than deploying it as a separate tool for defense evasion. This unique approach simplifies attack execution, reduces the operational footprint, and significantly narrows the window for defenders to respond. Initially, the group's activity was sometimes misattributed to the Black Basta ransomware group due to similar tactics, but further analysis confirmed Reynolds as a distinct and emergent ransomware family. The group's primary motivation is financial gain through data encryption and extortion.

Paises afectados

Sectores atacados