📌On 4th December 2025; the group had announced 23 new victims on their DLS, by scrapping old Data leaks
📌Upon analyzing, it is found that 11 victims are recycled from April 2025 LockBit Leaks
📌2 Victims are from #Weyhro and #RansomHouse Group

#malware #TOR #CyberSecurity

📌Both group resembles same, however their targeted victims are different
📌Salt Typhoon targets global entities except CIS, however Space Pirates targets only CIS including Russian Aerospace and Critical Plants

📌The catch here is: Different names assigned to same loader, but for different APT Groups
📌SNAPPYBEE Loader = Salt Typhoon
📌DEED RAT = Space Pirates
📌DEED RAT was initially used by Space Pirates, then used by Salt Typhoon in recent campaigns