Microsoft warns of ransomware attacks on US healthcare

Home / ransomware / Microsoft warns of ransomware attacks on US healthcare

Microsoft warns of ransomware attacks on US healthcare

September 19, 2024 cyberelias 0 Comments 1 tag

However, it is quite possible, from the use of the data synchronization tool MEGASync, that the threat actor went straight after extortion without making any encryption at all. The tool is used by the affiliates for data exfiltration and is part of the INC ransomware kit. “In several cases, Microsoft assesses that the group did not deploy ransomware and instead possibly performed extortion using only exfiltrated stolen data,” Microsoft has said in an Oct 2022 blog.

A frequent public sector offender

Vanilla Tempest, also tracked as DEV-0832 and Vice Society, is a known offender of the education and healthcare sector. Additionally, the threat actor was often observed targeting the manufacturing industry.

Active since June 2021, the group has used multiple ransomware families, including BlackCat, Quantum Locker, Zeppelin, and Rhysida, and typically uses PowerShell scripts in their attacks.

Tags: ransomware

Explore More

NotLockBit Ransomware Targets Both Windows and MacOS

Researchers warn that NotLockBit, a new malware family mimicking LockBit ransomware, can impact Windows and macOS systems. The malware appears to be the first fully functional ransomware targeting macOS systems,

EXECUTIVE SUMMARY: Until recently, the signs of a phishing scam were relatively obvious – typos, “dear”, clumsy grammar, a cloying sense of urgency. Not only did people know what to

By Hendrik De Bruin, Security Engineer, Check Point Software Technologies. Infostealers…ransomware’s lesser-known cousin When it comes to malware, ransomware usually steals the limelight, largely because of the direct, devastating impact