CISA, FBI, HHS, and MS-ISAC released a joint Cybersecurity Advisory called #StopRansomware: Black Basta. It provides tactics, techniques, procedures, and indicators of compromise used by Black Basta ransomware affiliates, identified through FBI investigations and third-party reporting.
Black Basta is a type of ransomware called ransomware-as-a-service (RaaS). It was discovered in April 2022. Black Basta has been used by hackers to attack more than 500 private industry and critical infrastructure entities, including healthcare organizations, in North America, Europe, and Australia.
Attackers are pretending to be Ukraine's Computer Emergency Response Team (CERT-UA) using AnyDesk to access target computers. “Unidentified individuals are...
CISAand its partners urge organizations to use the recommendations in the joint CSA to prevent Black Basta and other ransomware attacks. For more information, visit StopRansomware.gov and the #StopRansomware Guide.