Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomware
… In February 2026, they ultimately shifted to networks of third-party-hosted virtual machines to maintain and scale operations. That kind of rapid change is part of the model: these services evolve quickly in response to pressure and friction. …