FBI: BlackCat Ransomware Scratched 60-Plus Orgs

Read Time:1 Minute, 47 Second

The BlackCat ransomware gang, is said to be the first known ransomware group to flourishingly break into contacts with Rust-written malware, has assailed at least 60 organizations all over the world as of March, according to the Federal Bureau of Investigation(FBI).

#youtube link:

Table of Contents

The BlackCat ransomware: About

It also known as ALPHV, is a moderately new group of cyber criminals that runs a Windows ransomware as a service. But while it only performed on the ransomware crime scene in November 2021, security investigators and federal law administration have linked its creators and money launderers to the blatant Darkside/Blackmatter crime rings, “demonstrating they have comprehensive networks and experience with ransomware operations,” the FBI said in a security alert this week.

The fact that the gang writes its ransomware in Rust, as adversed to C/C++, is engrossing. Rust imaginably has tough safety measures constructed in, meaning the malware could be more stable and predictable. Like C/C++ toolchains, the Rust environment can be used to construct programs for installed devices, and assimilated with other programming languages, said Attivo Networks Chief Security Advocate Carolyn Crandall.

The BlackCat ransomware: Cisco Umbrella flaw allows remote admin credential theft

Cisco fixed a sharpness susceptiblity in its Umbrella virtual appliance that, if oppressed, could allow an apocryphal, remote user to abduct administrator accreditation and change configurations or even reload the virtual appliance.

FBI: BlackCat ransomware scratched 60-plus orgs: Plus: Cisco Umbrella flaw patched, lid… https://t.co/WeNpebaTJY #cybersecurity #infosec pic.twitter.com/EnlM1PyuPU

— goprivacy (@goprivacy1) April 25, 2022

The Cisco security team says it’s not awake of any malignant exploitation in the wild.

The BlackCat ransomware: Lid blown off TeamTNT malware

In an attempt to stay one step ahead of protectors, the TeamTNT cybercrime group has changed its malignant shell scripts after security investigators made the code public.

TeamTNT, which has been around since 2019, actually targets cloud and stacked environments.

LAPSUS$ ‘stole’ T-Mobile US source code

The LAPSUS$ extortion gang stole T-Mobile US source code in the weeks leading up to the jail of some of its suspicious members in March, according to infosec blogger Brian Krebs.

Stay connected with TheNostalgistFilm for more updates.