Author Topic: FBI: Ransomware gang breached 52 US critical infrastructure orgs  (Read 219 times)

0 Members and 1 Guest are viewing this topic.

Online mountaineer

  • Hero Member
  • *****
  • Posts: 79,945
Quote
FBI: Ransomware gang breached 52 US critical infrastructure orgs
 By Sergiu Gatlan
    March 7, 2022

The US Federal Bureau of Investigation (FBI) says the Ragnar Locker ransomware gang has breached the networks of at least 52 organizations from multiple US critical infrastructure sectors.

This was revealed in a joint TLP:WHITE flash alert published on Monday in coordination with the Cybersecurity and Infrastructure Security Agency.

"As of January 2022, the FBI has identified at least 52 entities across 10 critical infrastructure sectors affected by RagnarLocker ransomware, including entities in the critical manufacturing, energy, financial services, government, and information technology sectors," the federal law enforcement agency said [PDF].  ...

Although the FBI first became aware of Ragnar Locker in April 2020, Ragnar Locker ransomware payloads were first observed in attacks months before, during late December 2019.

Ragnar Locker operators terminate remote management software (e.g., ConnectWise, Kaseya) used by managed service providers (MSPs) to manage clients' systems remotely on compromised enterprise endpoints.

This allows the threat actors to evade detection and make sure remotely logged-in admins do not interfere with or block the ransomware deployment process.  ...
Full story at Bleeping Computer
Support Israel's emergency medical service. afmda.org

Offline Kamaji

  • Hero Member
  • *****
  • Posts: 58,206
Re: FBI: Ransomware gang breached 52 US critical infrastructure orgs
« Reply #1 on: March 08, 2022, 05:19:10 pm »
Russian?