More than 60 stakeholders contributed to a ransomware framework released Thursday morning, which advocates for nearly 50 interlocking government and private sector strategies to tackle the criminal scourge.
Companies are often pilloried in the wake of data breaches for lacking transparency or leaving their users in the dark about potential impact. This incident demonstrates the flip side of that coin, how information or communications from a company following a breach can be weaponized by bad actors.
Demers said the department would evaluate the Exchange operation to try to generalize future standards, and that such infiltration of private systems would not be a "tool of first resort."
Late last year, CISA, HHS and the FBI issued a joint warning on impending cyberattacks on hospitals during the pandemic. Today’s columnist, Jeff Costlow of ExtraHop, offers strategies to help hospitals defeat those attacks.
Researchers reported that to ignite a ransomware payload, the attackers abuse a Cobalt Strike beacon. The researchers believe the China Chopper web shell was used in a likely attempt to circumvent detection with known samples.
