The ransomware operation VanHelsing has leaked the source code for its affiliate panel, data leak site, and Windows encryptor builder following an attempt by a former developer to sell the code. VanHelsing, which targets various systems, aims to release an enhanced version soon. Despite the leak of significant components, the full suite of code is incomplete, as valuable parts like the Linux builder are missing. Security experts verified the legitimacy of the leaked files, which has implications for malicious actors looking to repurpose the software.
VanHelsing has made public the source code of its affiliate panel, data leak blog, and Windows encryptor builder after a former developer attempted to sell it.
The VanHelsing operators published the code themselves, claiming that the former developer was trying to scam others, and are planning to return with an improved version.
Although the leaked data is less complete than claimed, BleepingComputer confirmed that the Windows builder and other related source code are genuine and functional.
Using the builder requires additional steps, as it connects to the affiliate panel's IP to retrieve data; malicious actors can modify the provided source code.
Collection
[
|
...
]