FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies

The U.S. Federal Bureau of Investigation (FBI) is warning of a new development of twin ransomware assaults concentrating on the very same victims, at least given that July 2023.

“In the course of these assaults, cyber threat actors deployed two unique ransomware variants from sufferer firms from the pursuing variants: AvosLocker, Diamond, Hive, Karakurt, LockBit, Quantum, and Royal,” the FBI said in an notify. “Variants have been deployed in different mixtures.”

Not a great deal is recognised about the scale of this sort of attacks, even though it can be considered that they come about in near proximity to one an additional, ranging from any place amongst 48 several hours to in just 10 times.

A further notable alter observed in ransomware assaults is the improved use of custom information theft, wiper equipment, and malware to exert strain on victims to pay up.

“This use of dual ransomware variants resulted in a blend of information encryption, exfiltration, and money losses from ransom payments,” the company reported. “Next ransomware attacks towards an presently compromised technique could significantly harm sufferer entities.”

It is worthy of noting that dual ransomware assaults are not an entirely novel phenomenon, with circumstances noticed as early as Could 2021.

Final calendar year, Sophos unveiled that an unnamed automotive provider experienced been hit by a triple ransomware attack comprising Lockbit, Hive, and BlackCat above a span of two months in between April and May perhaps 2022.

Forthcoming WEBINARFight AI with AI — Battling Cyber Threats with Subsequent-Gen AI Tools

Completely ready to deal with new AI-pushed cybersecurity difficulties? Join our insightful webinar with Zscaler to tackle the expanding threat of generative AI in cybersecurity.

Supercharge Your Abilities

Then, before this thirty day period, Symantec in-depth a 3AM ransomware attack focusing on an unnamed target adhering to an unsuccessful try to provide LockBit in the target network.

The change in practices boils down to quite a few contributing elements, which includes the exploitation of zero-day vulnerabilities and the proliferation of preliminary accessibility brokers and affiliate marketers in the ransomware landscape, who can resell entry to target systems and deploy many strains in brief succession.

Businesses are advised to improve their defenses by keeping offline backups, checking exterior distant connections and distant desktop protocol (RDP) use, implementing phishing-resistant multi-factor authentication, auditing user accounts, and segmenting networks to avoid the spread of ransomware.

Identified this posting intriguing? Follow us on Twitter  and LinkedIn to browse extra exceptional written content we post.

Some parts of this article are sourced from:
thehackernews.com