Bleepingcomputer
Crazy Ransomware Gang Exploits Employee Monitoring Tools for Attacks
First seen 12 Feb 2026, 01:27 UTC
•



+8
•84% similarity
•48.1
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Crazy ransomware gang has been observed exploiting legitimate employee monitoring software, specifically Net Monitor for Employees Professional, along with the SimpleHelp remote support tool. This tactic allows them to maintain persistence in corporate networks, evade detection, and prepare for ransomware deployment, affecting organizations that utilize these tools for employee productivity tracking.
ThreatCluster AI
Timeline
2026-02-11
Huntress reports on ransomware gang's use of monitoring tools
2026-02-11
Bleepingcomputer publishes details of the attacks