009

Pay2Key.I2P, an Iranian-linked Ransomware-as-a-Service tied to the Fox Kitten APT and Mimic, has reemerged with enhanced capabilities and an ideological focus on attacks against Israel and the U.S.; it has reportedly achieved over 51 payouts totaling more than $4M, added Linux support, employs evasion techniques (disabling Defender, artifact cleanup), and uniquely hosts its infrastructure on I2P while offering new operator payout models.