Numerous ransomware groups are employing a malicious software known as Skitnet in their post-exploitation initiatives to acquire confidential information and gain remote access to breached systems.
“Skitnet has been available for purchase on illicit forums such as RAMP since April 2024,” reported Swiss cybersecurity firm PRODAFT to The Hacker News. “Nonetheless, since the beginning of 2025, we have detected various ransomware operators utilizing it.”