CISA, FBI, HHS, and MS-ISAC released a joint Cybersecurity Advisory called #StopRansomware: Black Basta. It provides tactics, techniques, procedures, and indicators of compromise used by Black Basta ransomware affiliates, identified through FBI investigations and third-party reporting.
Black Basta is a type of ransomware called ransomware-as-a-service (RaaS). It was discovered in April 2022. Black Basta has been used by hackers to attack more than 500 private industry and critical infrastructure entities, including healthcare organizations, in North America, Europe, and Australia.
"Palo Alto Networks has observed threat activity exploiting an unauthenticated remote command execution vulnerability against a limited number of firewall...
CISAand its partners urge organizations to use the recommendations in the joint CSA to prevent Black Basta and other ransomware attacks. For more information, visit StopRansomware.gov and the #StopRansomware Guide.