The Cuba ransomware has targeted attacks on critical infrastructure organizations in the United States and IT enterprises across Latin America. In order to acquire credentials, it employs a blend of old and contemporary tools and leverages CVE-2023-27532 to extract credentials.
