ROADSWEEP

ROADSWEEP is a ransomware family that has been associated with likely Iranian threat actors conducting politically motivated disruptive activities. The malware is designed to encrypt files on victim systems and demand payment for decryption. It has been observed using stolen certificates and employing sophisticated techniques to evade detection.