Notorious Russian ransomware gang Evil Corp. reportedly hit Sinclair Broadcast Group
Liska said Evil Corp.’s status means the group has to “swap out families to trick companies into paying them.” Evil Corp.’s malware has varied over the years and carried different names. Liska and Emsisoft threat analyst Brett Callow said Macaw represents the latest iteration of a malware strain called WastedLocker, which was introduced after the U.S. sanctions in an attempt to distance the group from previous tools, according to research that CrowdStrike published in March.