OTX Threat: Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM

Settra is a ransomware variant first observed in June 2026 that targets organizations through VPNs or compromised credentials. Two incidents were investigated in July and September 2026, affecting the consumer services, retail, and manufacturing sectors. Attackers deployed MeshAgent RMM for persistence, naming ransomware executables after victim domain names. The malicious activity included file e Sectors: Retail, Manufacturing