Jul 32026 Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials Arctic Wolf says Anubis affiliates abused RMM tools, VPN logins, RDP, PsExec, and cloud-transfer tools before ransomware deployment.
