BERT Ransomware Quietly Gains Global Ground

BERT ransomware, active since March 2025, has rapidly evolved into a multi-platform threat targeting systems across critical sectors. Leveraging REvil’s code and demanding Bitcoin via the Session messenger, the campaign’s growing operational footprint and double-extortion tactics signal a persistent and escalating threat landscape for global enterprises.