‘Snatch’ Ransom Group Exposes Visitor IP Addresses, 'Krebs on Security' has reports

Leaked data suggest that Snatch is one of several ransomware groups using paid ads on Google.com to trick people into installing malware disguised as popular free software, such as Microsoft Teams, Adobe Reader, Mozilla Thunderbird, and Discord.

"This is a criminal group that shames others for not protecting user data,” a security researcher said. “And here they are leaking their user data.”

All of the malware mentioned in this story is designed to run on Microsoft Windows devices.