CISA, FBI, HHS, and MS-ISAC released a joint Cybersecurity Advisory called #StopRansomware: Black Basta. It provides tactics, techniques, procedures, and indicators of compromise used by Black Basta ransomware affiliates, identified through FBI investigations and third-party reporting.
Black Basta is a type of ransomware called ransomware-as-a-service (RaaS). It was discovered in April 2022. Black Basta has been used by hackers to attack more than 500 private industry and critical infrastructure entities, including healthcare organizations, in North America, Europe, and Australia.
An unknown threat cluster has targeted European healthcare organizations, deploying PlugX and ShadowPad. In some cases, these intrusions resulted in...
Indian government and educational websites, along with reputable financial brands, have experienced SEO poisoning, causing user traffic to be redirected...
Number of attacks and ransom payments until June 2023 (Elliptic)
CISAand its partners urge organizations to use the recommendations in the joint CSA to prevent Black Basta and other ransomware attacks. For more information, visit StopRansomware.gov and the #StopRansomware Guide.