Agencies advise organizations to protect against BlackCat/ALPHV ransomware

Apr 22, 2022 - 05:13 PM
Cybersecurity Lock on Gold Wall

The FBI this week released a report detailing indicators of compromise associated with ransomware variants that have compromised at least 60 entities worldwide, and recommendations for organizations to reduce their risk of attack. The Cybersecurity & Infrastructure Agency today encouraged organizations to review and apply the recommendations. 

John Riggi, AHA’s national advisor for cybersecurity and risk, said, “In addition to containing actionable indicators of compromise, this FBI FLASH points out that the BlackCat gang is using advanced programming language (known as RUST) that increases the reliability of their attacks, and offering their capability to other hackers as ‘ransomware as a service.’ It also notes that members of the BlackCat ransomware gang have been linked to the Russian-speaking Darkside/Blackmatter gang responsible for the Colonial Pipeline ransomware attack in 2021 – thereby indicating this group may possess the capability to attack U.S. critical infrastructure. Whether they have the current intent remains to be seen. Given the possible Russian connection and the flurry of recent government warnings of Russian-state sponsored and criminal cyber threats to U.S. critical infrastructure, the BlackCat ransomware group is of significant concern.”   

For more information on this and other cyber risks, contact Riggi at jriggi@aha.org.

Related News Articles

Headline
Medical technology company Stryker disrupted globally by cyberattack
Stryker, a medical technology company that provides services and products for hospitals, was disrupted globally by a cyberattack, the company announced March…
Headline
White House issues executive order addressing cybercrime by threat groups
The White House issued an executive order March 6 to combat cybercrimes by threat groups. The order highlights how such groups can receive willing or…
Headline
ASPR releases cybersecurity module to conduct risk assessments 
The Administration for Strategic Preparedness and Response has released a new cybersecurity module for organizations to conduct risk assessments. The free…
Perspective
Staying Cyber Alert and Cyber Ready
Public
As the world has learned in recent years, today’s conflicts are fought with many weapons, and cyber warfare is an integral part of the arsenal.As of this…
Headline
FBI reminds of potentially malicious activity by Iranian cyber actors
The FBI is reminding critical infrastructure organizations to implement mitigations from a June 2025 fact sheet on potential actions by Iranian-affiliated…
Headline
CISA report updates findings on RESURGE malware attacks
The Cybersecurity and Infrastructure Security Agency Feb. 26 released a report that updates findings from last year on RESURGE malware used to gain covert…