New ransomware targets Turkey via Adwind RAT

Reported 15 Apr 2026 by otx · Severity: medium

A threat cluster has been identified leveraging a customized Adwind (Java RAT) variant with polymorphic characteristics to deliver JanaWare ransomware. The campaign specifically targets Turkish users through geofencing mechanisms that check system locale and external IP geolocati