RansomHub hits 210 victims in just 6 months

August 30, 2024 at 07:58PM RansomHub, a rising ransomware group, has amassed over 210 victims since its emergence in February. Its affiliates target a broad range of sectors, using tactics like vulnerability exploits and specific tools for data exfiltration. The advisory suggests mitigation measures and emphasizes the importance of secure software design. RansomHub faces strong … Read more

#StopRansomware: Black Basta

May 10, 2024 at 04:13PM The joint Cybersecurity Advisory (CSA) pertains to Black Basta, a ransomware variant targeting critical infrastructure, particularly the Healthcare and Public Health (HPH) Sector. Affiliates use phishing and exploiting vulnerabilities for initial access, employ a double-extortion model, and conduct data exfiltration prior to encryption. The CSA provides TTPs, IOCs, and mitigations … Read more

In Other News: Airline Privacy Review, SEC’s SolarWinds Hack Probe, Apple MFA Bombing

March 29, 2024 at 10:36AM Summary: SecurityWeek’s roundup compiles this week’s cybersecurity stories, including US airlines facing privacy reviews, HHS cyberattack investigation, analysis of phishing kits like Tycoon and Darcula, MFA bombing attacks on Apple users, continued investigation into Chinese hacking of Finland’s parliament, and revelations about abandoned WordPress plugins. Other topics include the SEC’s … Read more

HHS Aiding Organizations Hit by Change Healthcare Cyberattack

March 6, 2024 at 09:21AM The US Department of Health and Human Services (HHS) is actively supporting healthcare providers following a ransomware attack on Change Healthcare, ensuring patient care is maintained. HHS is working with various agencies to expedite claims and payments, encourage payers to waive requirements, and provide information on accelerated payment opportunities. The … Read more

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

February 28, 2024 at 08:39AM The U.S. government warns of BlackCat ransomware attacks targeting healthcare, offering a $15 million reward for information. Law enforcement’s takedown of BlackCat suffered a setback, leading to attacks on critical infrastructure organizations. Threat actors leverage security flaws in remote access software, impacting compromised organizations globally. Ransomware groups employ sophisticated tactics, … Read more

FBI, CISA warn US hospitals of targeted BlackCat ransomware attacks

February 27, 2024 at 05:32PM The FBI, CISA, and HHS have issued a warning about ALPHV/Blackcat ransomware attacks targeting U.S. healthcare organizations. The BlackCat cybercrime gang, linked to over 60 breaches and $300 million in ransoms, primarily targets the healthcare sector. Mitigation measures are recommended, with a focus on cybersecurity safeguards for critical infrastructure and … Read more