Cuba Ransomware Extorted Over $60 Million in Ransom Charges from Greater than 100 Entities | Gen Tech

roughly Cuba Ransomware Extorted Over $60 Million in Ransom Charges from Greater than 100 Entities will cowl the most recent and most present data concerning the world. admission slowly appropriately you comprehend with out issue and accurately. will enhance your data expertly and reliably


cuba ransomware

The risk actors behind the Cuba ransomware (often known as COLDDRAW) have acquired greater than $60 million in ransom funds and have compromised greater than 100 entities worldwide as of August 2022.

In a brand new advisory shared by the US Cybersecurity and Infrastructure Safety Company (CISA) and the Federal Bureau of Investigation (FBI), the businesses highlighted a “sharp enhance in each the variety of compromised US entities and ransom quantities”.

The ransomware crew, often known as Tropical Scorpius, has been noticed focusing on the monetary providers, authorities amenities, healthcare, vital manufacturing, and IT sectors, whereas additionally increasing their techniques to achieve preliminary entry and work together with corporations. breached networks.

cyber security

It’s price noting that regardless of the title “Cuba”, there isn’t any proof to counsel that the actors have any connection or affiliation with the island nation.

The entry level of the assaults entails the exploitation of identified safety flaws, phishing, compromised credentials, and legit Distant Desktop Protocol (RDP) instruments, adopted by the distribution of the ransomware through Hancitor (often known as Chanitor).

A few of the failures integrated by Cuba in its set of instruments are the next:

  • CVE-2022-24521 (CVSS Rating: 7.8): An elevation of privilege vulnerability within the Home windows Widespread Registry File System (CLFS) driver
  • CVE-2020-1472 (CVSS Rating: 10.0): An elevation of privilege vulnerability within the distant Netlogon (often known as ZeroLogon) protocol.

“Along with deploying ransomware, actors have used ‘double extortion’ strategies, through which they exfiltrate the sufferer’s information and (1) demand a ransom fee to decrypt it and (2) threaten to publish it if a ransom is paid . was not carried out,” CISA famous.

Cuba can be stated to share hyperlinks with the operators of the RomCom RAT and one other ransomware household referred to as Industrial Spy, based on latest findings by BlackBerry and Palo Alto Networks Unit 42.

The RomCom RAT is distributed through trojanized variations of official software program akin to SolarWinds Community Efficiency Monitor, KeePass, PDF Reader Professional, Superior IP Scanner, pdfFiller, and Veeam Backup & Replication which can be hosted on faux web sites.

The CISA and FBI advisory is the most recent in a collection of alerts businesses have issued about completely different ransomware strains together with MedusaLocker, Zeppelin, Vice Society, Daixin Group, and Hive.

Did you discover this text attention-grabbing? comply with us Twitter and LinkedIn to learn extra unique content material we publish.


I want the article practically Cuba Ransomware Extorted Over $60 Million in Ransom Charges from Greater than 100 Entities provides perception to you and is helpful for adjunct to your data

Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities