CISA, FBI, HHS, and MS-ISAC released a joint Cybersecurity Advisory called #StopRansomware: Black Basta. It provides tactics, techniques, procedures, and indicators of compromise used by Black Basta ransomware affiliates, identified through FBI investigations and third-party reporting.
Black Basta is a type of ransomware called ransomware-as-a-service (RaaS). It was discovered in April 2022. Black Basta has been used by hackers to attack more than 500 private industry and critical infrastructure entities, including healthcare organizations, in North America, Europe, and Australia.
A serious vulnerability, CVE-2023-45249 (CVSS 9.8), has been found in Acronis Cyber Infrastructure (ACI), a widely used software-defined infrastructure solution...
Number of attacks and ransom payments until June 2023 (Elliptic)
CISAand its partners urge organizations to use the recommendations in the joint CSA to prevent Black Basta and other ransomware attacks. For more information, visit StopRansomware.gov and the #StopRansomware Guide.