Incidents involving malware or ransomware. In some cases, incidents called “ransomware” do not involve any locking but merely hack, exfiltrate, and attempt to extort.
Towns across America continue to fall prey to ransomware gangs. This week, the SuspectFile blog reported on how the AlphV gang, also known as “BlackCat,” started leaking files from the Town of Iowa in Louisiana: The ransomware group ALPHV (BlackCat) has published a first part of exfiltrated data from the Town of Iowa in the […]
Today, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement under the Health Insurance Portability and Accountability Act (HIPAA) with Doctors’ Management Services, a Massachusetts medical management company that provides a variety of services, including medical billing and payor credentialing. The HIPAA Privacy, Security, and Breach Notification […]
Eric Geller reports: The Biden administration and dozens of foreign allies will pledge this week never to pay ransoms to hackers who lock up their national governments’ computer systems, hoping to discourage financially motivated cyber criminals from seeing those systems as attractive ransomware targets. The joint promise will occur as part of the third annual […]
SummaryThe Federal Bureau of Investigation (FBI) is releasing this Private Industry Notification tohighlight emerging ransomware trends and encourage organizations to implement therecommendations in the “Mitigations” section to reduce the likelihood and impact ofransomware incidents. ThreatAs of July 2023, the FBI noted two trends emerging across the ransomware environment and isreleasing this notification for industry awareness. […]
Rhysida has now added Singing River Health System in Mississippi to their dark web leak site. The health system, which includes Pascagoula Hospital, Ocean Springs Hospital, and Gulfport Hospital as well as 10 clinics discovered the ransomware attack on August 19. In its most recent update of August 31, it stated: “We understand the concerns […]
The Cuba ransomware gang, who are thought to be in Russia, have changed things up a bit and recently attacked U.S. critical infrastructure — something most gangs have avoided after DarkSide attacked Colonial Pipeline in 2021. Read more of this article at BlackBerry.
In a new HiatusRAT malware campaign, threat actors targeted a U.S. Department of Defense server in a reconnaissance attack. Read more of this article by Sergiu Gatlan at Bleeping Computer.
U.S. officials said Tuesday that the FBI and its European partners infiltrated and seized control of a major global malware network used for more than 15 years to commit a gamut of online crimes including crippling ransomware attacks. They then remotely removed the malicious software agent — known as Qakbot — from thousands of infected […]
Prospect Medical Holdings has now confirmed what already seemed clear to researchers and those who check leak sites. The threat actors did get files with personal information. Prospect Medical Holdings is confirming new details about a massive data theft from three Connecticut hospitals and others around the country in a nearly month-old cyber attack by a shadowy […]
International Counter Ransomware Initiative 2023 Joint Statement
Released by the White House, November 2, 2023 The 50 members of the International Counter Ransomware Initiative (CRI)—Albania, Australia, Austria, Belgium, Brazil, Bulgaria, Canada, Colombia, Costa Rica, Croatia, the Czech Republic, the Dominican Republic, Egypt, Estonia, the European Union, France, Germany, Greece, India, INTERPOL, Ireland, Israel, Italy, Japan, Jordan, Kenya, Lithuania, Mexico, the Netherlands, New […]