Do Son Trend Micro uncovers BERT ransomware (Water Pombero) deploying multi-threaded variants against Windows, Linux, and ESXi systems, showing code similarities to REvil's Linux variant.
REvil
Notably, DiceLoader has been actively used since 2021, with the malware often delivered via a PowerShell script.