Sergiu Gatlan reports: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has unveiled additional details regarding misconfigurations and security vulnerabilities exploited by ransomware gangs, aiming to help critical infrastructure organizations thwart their attacks. CISA released this information as part of its Ransomware Vulnerability Warning Pilot (RVWP) program, established in January of this year, when it announced that…
Category: Malware
FBI and CISA Release Update on AvosLocker Advisory
The AvosLocker ransomware leak site has not been seen for months, but the government is providing an update on them based on its investigations as recently as May 2023. In May, DataBreaches reported on the Bluefield College breach by an affiliate of Avos. Because AvosLocker is RaaS, it’s possible that it is still active but…
How Vermont’s largest hospital now protects patient info 3 years after ransomware attack
Cam Smith reports: Nearly three years after Vermont’s largest hospital fell victim to a ransomware attack, hospital officials say they’ve made progress toward better systems to protect patient information. During the breach, nearly 1,300 servers were compromised on more than 5,000 devices across the UVM Health Network. Hospital officials say while no patient or employee…
Ransomware group starts leaking data allegedly from NJ cardiology consultants group
On September 23, DataBreaches reported that the NoEscape ransomware gang had added Mulkay Cardiology Consultants (Mulkay) in New Jersey to their leak site with a date of September 2. At the time, they claimed to have successfully encrypted them and exfiltrated 60 GB of files. “We have 60GB of confidential and personal data on more…
Seattle Housing Authority allegedly compromised by ransomware gang
The NoEscape ransomware site claims to have successfully compromised the Seattle Housing Authority (SHA). In a post on their leak site, they claim to have encrypted the SHA’s main servers and exfiltrated 158 GB of data. ” we have 400,000 confidential files,” they claim, including, they write: Confidential Privacy Act Data! Confidential agreements and contracts,…
Steam upgrades security after games hijacked to spread malware
Imogen Donovan reports: Valve has been in contact with several game developers who were hit by hackers who used a vulnerability to hide malware in their games on Steam. The hackers’ intention was to play the malware off as an update to the installed game on players’ PCs, then infecting them when the “new build” was downloaded. Read…