SEXi Ransomware Rebrands as ‘APT Inc.,’ Retains Prior Extortion Tactics

The cybercrime group known as SEXi ransomware, now operating as APT Inc., has been targeting organizations since February. They use a leaked Babuk encryptor for VMware ESXi servers and LockBit 3 encryptor for Windows servers.