The Nefilim ransomware group, known to be
active since February 2020, adopts the Nemty ransomware code written in the Delphi
programming language. It uses a Citrix vulnerability/RDP to access corporate
networks. Nefilim started its own data leak…
Article Source
https://www.acronis.com/en-us/tru/posts/nefilim-ransomware-uses-citrix-vulnerability-to-compromise-victims-machines/