US sanctions APT31 hackers behind critical infrastructure attacks

March 25, 2024 at 12:11PM The U.S. Treasury Department sanctioned Wuhan-based company used by Chinese Ministry of State Security for attacks on U.S. critical infrastructure. Two Chinese nationals linked to APT31 hacking group, working for the company, also sanctioned. Joint effort with DOJ, FBI, State Department, and UK FCDO. UK also sanctioned Wuhan XRZ and … Read more

US Government Issues New DDoS Mitigation Guidance

March 22, 2024 at 09:54AM CISA, FBI, and MS-ISAC have issued updated joint guidance on defending against DoS and DDoS attacks. The guidance categorizes attacks, provides mitigation recommendations, and outlines differences between DoS and DDoS attacks. Organizations are advised to conduct risk assessments, implement network monitoring, and activate incident response plans to minimize potential damage … Read more

CISA shares critical infrastructure defense tips against Chinese hackers

March 19, 2024 at 04:25PM U.S. and partner cybersecurity agencies issued warnings against the Chinese hacking group, Volt Typhoon, targeting critical infrastructure. They provided defense tips and urged infrastructure leaders to empower their cybersecurity teams. The group has breached U.S. critical infrastructure, posing risks of disruption during military conflicts. Additionally, FBI disrupted the group’s botnet. … Read more

White House Budget Proposal Seeks Cybersecurity Funding Boost 

March 13, 2024 at 10:45AM The White House has released a $7.3 trillion budget proposal for fiscal year 2025, emphasizing increased cybersecurity spending. This includes specific allocations such as $13 billion across civilian departments, $3 billion for the cybersecurity agency CISA, and additional funding for the Justice Department and healthcare sector. The budget also addresses … Read more

The Week in Ransomware – March 8th 2024 – Waiting for the BlackCat rebrand

March 8, 2024 at 06:40PM The BlackCat/ALPHV ransomware gang has shut down after scamming an affiliate for $22 million, amidst increasing calls for a federal ban on ransom payments. Other ransomware activity includes various new variants identified by PCrisk and coordinated attacks by GhostSec and Stormous groups. The impact spans sectors from healthcare to beer … Read more

The Week in Ransomware – March 8th 2024 – Waiting for the DarkSide rebrand

March 8, 2024 at 05:29PM The BlackCat/ALPHV ransomware gang, after targeting critical infrastructure and stealing millions through an exit scam, has shut down. It caused widespread disruption, including $22M stolen from Optum’s Change Healthcare. Other ransomware attacks emerged, leading to concerns about the rise in cybercrime and discussions of a federal ban on ransom payments. … Read more

FBI: Cybercrime Losses Exceeded $12.5 Billion in 2023

March 7, 2024 at 09:34AM The FBI’s IC3 reported a 10% increase in cybercrime complaints in 2023, totaling over 880,000 in the US with $12.5 billion in losses, a 22% rise from 2022. Phishing dominates complaints, with investment fraud and BEC causing the highest losses. Ransomware affected critical sectors, with LockBit and BlackCat being active … Read more

The federal bureau of trolling hits LockBit, but the joke’s on us

March 4, 2024 at 04:37AM Operation Cronos, a multinational effort to dismantle ransomware gang LockBit, surprises with a humorous twist as law enforcement tampered with the gang’s website. Despite the takedown, LockBit reappeared, raising concerns about the resilience of criminal organizations and the challenges of combating them, especially in the context of cryptocurrency. This event … Read more

Ransomware gang claims they stole 6TB of Change Healthcare data

February 28, 2024 at 02:37PM The BlackCat/ALPHV ransomware gang claims responsibility for a cyberattack on Optum, a UnitedHealth Group subsidiary, causing an ongoing outage on the Change Healthcare platform. They allege stealing 6TB of sensitive data, including medical records, from thousands of healthcare providers and insurance companies. The FBI, CISA, and HHS warned that BlackCat … Read more

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

February 28, 2024 at 08:39AM The U.S. government warns of BlackCat ransomware attacks targeting healthcare, offering a $15 million reward for information. Law enforcement’s takedown of BlackCat suffered a setback, leading to attacks on critical infrastructure organizations. Threat actors leverage security flaws in remote access software, impacting compromised organizations globally. Ransomware groups employ sophisticated tactics, … Read more