HC3 Threat Briefing TLP White - Netwalker Ransomware - September 24, 2020

Netwalker Ransomware was initially discovered in September 2019 with a compilation timestamp dating back to August 28, 2019. 

  • Also known as: Malito, Koko, KazKavKovKiz
  • Operated as Ransomware-as-a-Service (RaaS) by a cybercrime group known as CIRCUS SPIDER
    • Advertised as a closed-affiliate program, and verifies applicants before they are being accepted as an affiliate
  • Significant targeting in the Asia Pacific (APAC) region, but can reach globally
    • Often target hospitals in the US and Spain
    • Big game hunters
  • Ransom demands from $1K USD to $3M USD; use “double extortion”; over $25 million since March
  • Leveraging coronavirus and exploiting healthcare organizations during pandemic

View details below.

Key Resources

Related Resources

Guides/Reports
Strategies for Cyber Preparedness in Health Care
Advisory
Hospitals That Are Oracle Customers Urged to Take Immediate Action to Address Security Vulnerability
Public
Issue Landing Page
Cybersecurity and Risk Advisory Service
Issue Landing Page
Support for Your Cybersecurity Program
Guides/Reports
Cybersecurity and Risk Advisory Services
Standards/Guidelines
Become an AHA Preferred Cybersecurity and Risk Provider
Public