Fast-Growing RA Ransomware Group Goes Global

March 5, 2024 at 01:10PM The RA World ransomware group, formed in April, has significantly expanded its attack scope. Targeting global organizations, the group recently launched sophisticated cyberattacks, notably in Latin America’s healthcare sector. With a focus on the US and adoption of double-extortion tactics, it poses a major threat, emphasizing the need for robust … Read more

Georgia’s Largest County Is Still Repairing Damage From January Cyberattack

March 3, 2024 at 08:54AM LockBit hackers disrupted government services in Georgia’s Fulton County by shutting down phone lines and threatening to release stolen data unless officials paid ransom. Despite law enforcement’s efforts to disrupt LockBit, the county is still working to restore services. The cyberattack did not affect the criminal case against former President … Read more

Pharmaceutical giant Cencora says data was stolen in a cyberattack

February 27, 2024 at 07:41PM Cencora, a pharmaceutical giant, revealed that threat actors stole data from its IT systems in a recent cyberattack. The company, previously known as AmerisourceBergen, focuses on pharmaceutical services and employs approximately 46,000 people. They are working with law enforcement and cybersecurity experts to investigate the incident, which is not expected … Read more

Cybersecurity for Healthcare—Diagnosing the Threat Landscape and Prescribing Solutions for Recovery

February 21, 2024 at 05:09AM The 2023 Thanksgiving Day witnessed ransomware attacks on U.S. hospitals, adversely affecting patient care. Small healthcare organizations are targeted due to vulnerable cybersecurity defenses and limited budgets, leading to compromised patient safety and hefty ransom payments. The healthcare sector needs advanced security measures, such as Managed EDR, and employee training … Read more

Cyberattack Disrupts Production at Varta Battery Factories

February 15, 2024 at 10:51AM Germany’s Varta disclosed a cyberattack disrupted production at five plants, affecting IT systems and administrative processes. The extent of damage is uncertain, with a task force formed to restore normal operations and work with cyber security experts. Varta’s global presence and impact on battery production is highlighted. Suspicion of a … Read more

BumbleBee Malware Buzzes Back on the Scene After 4-Month Hiatus

February 14, 2024 at 11:59AM The Bumblebee loader, known for delivering various malware, has reappeared in the US targeting organizations after a four-month hiatus. The recent campaign uses email with OneDrive URLs to initiate attacks, signaling a surge in cybercriminal activity. Interestingly, the attackers have employed VBA macro-enabled documents, a tactic rarely used since Microsoft’s … Read more

Ransomware Groups Claim Hits on Hyundai Motor Europe and a California Union

February 9, 2024 at 05:59PM Hyundai Motor Europe and SEIU Local 1000 in California both suffered cyberattacks last month, resulting in data loss. Black Basta claimed to have stolen 3TB of data from Hyundai, while LockBit took 308GB from the union. Both organizations are working with cybersecurity experts to investigate and enhance network security. The … Read more

The Week in Ransomware – February 2nd 2024 – No honor among thieves

February 2, 2024 at 06:39PM Ransomware continues to disrupt hospitals, impacting patient care. Despite claims by groups like LockBit to avoid encrypting hospitals, attacks persist, causing organizations to shut down IT systems. Affiliates target healthcare, affecting medical chart access and electronic prescriptions. Recent attacks on Lurie Children’s Hospital and Saint Anthony Hospital highlight the ongoing … Read more

The Ransomware Threat in 2024 is Growing: Report

January 30, 2024 at 11:54AM Ransomware threats have intensified in 2023, with criminals now focusing on data extraction instead of encryption. The Delinea survey of US IT and security decision makers revealed a significant increase in ransomware attacks and victims who paid the ransom. Additionally, the report highlights the impact of cyber insurance on the … Read more

Aircraft Lessor AerCap Confirms Ransomware Attack

January 23, 2024 at 09:12AM AerCap, an aircraft leasing company, confirmed being targeted by ransomware on January 17. The company asserted control of its IT systems and reported no financial loss. It notified law enforcement and is investigating potential data compromise. ‘Slug’ claimed responsibility, threatening to leak stolen data unless a ransom is paid. AerCap … Read more