RTM — Ransomware Profile

RTM is a cybercriminal group that has been active since at least 2015 and is primarily interested in users of remote banking systems in Russia and neighboring countries. The group uses a Trojan by the same name (RTM).

Tools & malware

Vendor research

Read the full analysis on IntelFusions