Welcome to ISMG's Ransomware Resource Center!

Ransomware has rapidly become one of the world's most prevalent types of cybercrime. The lure for criminals is easy to see: Using highly automated and easily distributed crypto-locking malware to forcibly encrypt systems, attackers can demand bitcoin ransoms in exchange for decryption keys. Use this Ransomware Resource Center for the latest details on emerging ransomware variants, threat intelligence on attackers, plus best practices for detection, response and remediation.

Ransomware Task Force Details Impact of Disrupting Operators

Mathew J. Schwartz • October 11, 2024

While a Ransomware Task Force study of 2023 ransomware group disruptions finds they're often "tactical and temporary," report co-author Taylor Grossman said recent, major law enforcement actions may "really strategically pull them apart and make it harder for them to regroup."

Fraud Management & Cybercrime

'Vanilla Tempest' Now Using INC Ransomware in Health Sector

Latest

Fraud Management & Cybercrime

Rhysida Leaks Nursing Home Data, Demands $1.5M From Axis

Marianne Kolbasuk McGee • October 11, 2024

Ransomware gang Rhysida is threatening to dump data on the darkweb that belongs to a Colorado provider of mental health, substance abuse and other healthcare services unless it pays nearly $1.5 million. The group is leaking records it claims to have stolen from a Mississippi nursing home.

Fraud Management & Cybercrime

Feds Warn Health Sector of New 'Trinity' Ransomware Threats

Marianne Kolbasuk McGee • October 7, 2024

Health sector entities have yet another ransomware group to worry about, warn U.S. federal authorities. Trinity, a relatively new sophisticated threat actor, is hitting a variety of critical industries, including healthcare, said the Department of Health and Human Services in an advisory.

Leadership & Executive Communication

CyberEdBoard Profiles in Leadership: Shervin Evans

Anna Delaney • September 30, 2024

Shervin Evans began his career as a programmer but he always knew his future was in cybersecurity. Now, 25 years later as an information security officer, he evangelizes about cybersecurity to employees in his organization, his family and the broader community.

Critical Infrastructure Security

Sophos: Attacks Drop in Nearly All Sectors But Healthcare

Marianne Kolbasuk McGee • September 26, 2024

Ransomware attacks are declining across many sectors - but not in healthcare, where an ongoing surge is reaching a four-year high in incidents, according to new research from security firm Sophos, which surveyed 5,000 IT leaders across 15 sectors and 14 countries between January and February.

Security Operations

Startup Torq Secures $70M to Advance Hyperautomation With AI

Michael Novinson • September 24, 2024

With $70 million in fresh capital, Torq is doubling down on its hyperautomation initiatives. The funding will enhance generative AI technologies that streamline security operations and provide autonomous threat investigation, alongside plans for broader U.S. and European market penetration.

Cybercrime

Telegram Pledges Closer Cooperation With Police

David Perera • September 23, 2024

Embattled Telegram CEO Pavel Durov signaled a more cooperative relationship with law enforcement, telling users Monday the messaging service will provide IP addresses and phone numbers "in response to valid legal requests." Durov faces criminal charges in France.

Fraud Management & Cybercrime

Pennsylvania Firm to Pay $65M for Cancer Patient Photo Hack

Marianne Kolbasuk McGee • September 23, 2024

A Pennsylvania-based healthcare system that was hacked by ransomware group BlackCat in 2023 and extorted over stolen exam photos of breast cancer patients posted to a data leak site has agreed to pay $65 million under a proposed settlement of a lawsuit affecting 134,000 patients and employees.

3rd Party Risk Management

How Mega Attacks Are Spotlighting Critical 3rd-Party Risks

Marianne Kolbasuk McGee • September 18, 2024

Recent mega data breaches involving third-party vendors - such as the Change Healthcare cyberattack - are intensifying the spotlight on critical security risk management and governance issues for business associates and other suppliers, said regulatory attorney Rachel Rose.

Multi-factor & Risk-based Authentication

Breach-Weary Snowflake Moves to MFA, 14-Character Passwords

Akshaya Asokan • September 16, 2024

Data warehousing platform Snowflake rolled out default MFA - as well as a 14-character password minimum - to shore up security in the wake of a series of cyberattacks in June that hit high-profile customers including Santander Bank, Advance Auto Parts, LA Unified School District and Neiman Marcus.

Fraud Management & Cybercrime

Clinical Considerations When Recovering From Ransomware

Marianne Kolbasuk McGee • September 16, 2024

Preparing healthcare organizations to respond to and rebound from a disruptive ransomware attack is akin to implementing a "12-step program," said Dr. Eric Liederman, CEO of consultancy CyberSolutionsMD and recently retired long-serving director of medical informatics at Kaiser Permanente.

Next-Generation Technologies & Secure Development

Mastercard Buys Threat Intel Firm Recorded Future for $2.65B

Michael Novinson • September 12, 2024

Mastercard plans to buy threat intelligence firm Recorded Future for $2.65 billion to enhance cyber resilience and offer greater protection and trust around digital transactions. The deal will enhance Mastercard's identity, fraud prevention services by helping businesses identify and mitigate risk.

Identity & Access Management

ColorTokens Strengthens Zero Trust With PureID Acquisition

Michael Novinson • September 11, 2024

ColorTokens purchased PureID, expanding its zero trust framework with identity-based segmentation for cloud and hybrid environments. The acquisition focuses on securing cloud applications, microservices and APIs through advanced identity-based authentication.