Tag Archives: ransomware

CISA, FBI, and MS-ISAC Release Advisory on Rhysida Ransomware

CISA, FBI, and MS-ISAC Release Advisory on Rhysida Ransomware 11/15/2023 11:00 AM EST Today, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released a joint Cybersecurity Advisory (CSA), #StopRansomware: Rhysida Ransomware, to disseminate known Rhysida ransomware indicators of compromise (IOCs), detection …

Continue reading “CISA, FBI, and MS-ISAC Release Advisory on Rhysida Ransomware”

CISA Releases Update to Royal Ransomware Advisory

CISA Releases Update to Royal Ransomware Advisory 11/13/2023 02:00 PM EST Today, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) released an update to joint Cybersecurity Advisory (CSA) #StopRansomware: Royal Ransomware. The updated advisory provides network defenders with additional information on tactics, techniques, and procedures (TTPs) and indicators of compromise …

Continue reading “CISA Releases Update to Royal Ransomware Advisory”

CISA, NSA, FBI, and MS-ISAC Release Update to #StopRansomware Guide

CISA, NSA, FBI, and MS-ISAC Release Update to #StopRansomware Guide 10/19/2023 03:00 PM EDT Today, the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released an updated version of the joint #StopRansomware Guide. The update includes new …

Continue reading “CISA, NSA, FBI, and MS-ISAC Release Update to #StopRansomware Guide”

CISA Releases New Resources Identifying Known Exploited Vulnerabilities and Misconfigurations Linked to Ransomware

CISA Releases New Resources Identifying Known Exploited Vulnerabilities and Misconfigurations Linked to Ransomware 10/12/2023 08:00 AM EDT Today, as part of the Ransomware Vulnerability Warning Pilot (RVWP), CISA launched two new resources for combating ransomware campaigns: A “Known to be Used in Ransomware Campaigns” column in the KEV Catalog that identifies KEVs associated with ransomware campaigns. …

Continue reading “CISA Releases New Resources Identifying Known Exploited Vulnerabilities and Misconfigurations Linked to Ransomware”

FBI and CISA Release Advisory on Snatch Ransomware

FBI and CISA Release Advisory on Snatch Ransomware 09/20/2023 01:30 PM EDT Today, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) released joint Cybersecurity Advisory (CSA) #StopRansomware: Snatch Ransomware, which provides indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with the Snatch ransomware variant. FBI investigations identified …

Continue reading “FBI and CISA Release Advisory on Snatch Ransomware”

CISA and FBI Publish Joint Advisory on QakBot Infrastructure

CISA and FBI Publish Joint Advisory on QakBot Infrastructure 08/30/2023 03:00 PM EDT Today, the Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory (CSA), Identification and Disruption of QakBot Infrastructure, to help organizations detect and protect against newly identified QakBot-related activity and malware. QakBot—also known as …

Continue reading “CISA and FBI Publish Joint Advisory on QakBot Infrastructure”

#StopRansomware: Vice Society

#StopRansomware: Vice Society 09/06/2022 12:33 PM EDT Original release date: September 6, 2022 CISA, the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) have released a joint Cybersecurity Advisory (CSA), #StopRansomware: Vice Society, to disseminate tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) associated with Vice Society …

Continue reading “#StopRansomware: Vice Society”

#StopRansomware: Zeppelin Ransomware

#StopRansomware: Zeppelin Ransomware 08/11/2022 10:03 AM EDT Original release date: August 11, 2022 CISA and the Federal Bureau of Investigation (FBI) have released a joint Cybersecurity Advisory (CSA), #StopRansomware: Zeppelin Ransomware, to provide information on Zeppelin Ransomware. Actors use Zeppelin Ransomware, a ransomware-as-a-service (RaaS), against a wide range of businesses and critical infrastructure organizations to …

Continue reading “#StopRansomware: Zeppelin Ransomware”

North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector 07/06/2022 10:00 AM EDT Original release date: July 6, 2022 CISA, the Federal Bureau of Investigation (FBI), and the Department of the Treasury (Treasury) have released a joint Cybersecurity Advisory (CSA), North Korean State-Sponsored Cyber Actors Use Maui Ransomware …

Continue reading “North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector”

#StopRansomware: MedusaLocker

#StopRansomware: MedusaLocker 06/30/2022 01:00 PM EDT Original release date: June 30, 2022 CISA, the Federal Bureau of Investigation (FBI), the Department of the Treasury (Treasury), and the Financial Crimes Enforcement Network (FinCEN) have released a joint Cybersecurity Advisory (CSA), #StopRansomware: MedusaLocker, to provide information on MedusaLocker ransomware. MedusaLocker actors target vulnerabilities in Remote Desktop Protocol …

Continue reading “#StopRansomware: MedusaLocker”