[MART] - Daily Diary #454 - FBI and USSS Joint Advisory Against BlackByte

[CTAS-MAT]

Hello,
I hope everyone is doing well!

Below is the entry for today.

02/16/2022 - Diary entry #454

Recently, in our Daily Diary #452, we covered BlackByte Ransomware and its attack to San Francisco 49ers. This week, on February 15th, FBI and the United States Secret Service (USSS) released a joint advisory about BlackByte attacks.

It's believed that BlackByte operations started in mid 2021, around July, and it was disclosed in late 2021. Initially, BlackByte was successful targeting manufacturing, healthcare and construction industries in the U.S., Europe and Austria, but shortly after, a free decryptor was released, which rendered most of the attacks useless. But recently, BlackByte attacks are back.

In the advisory, there is information about BlackByte ransomware-as-a-service operation and provides a collection of IOCs that companies can implement in their security solutions to detect BlackByte payloads. The advisory also contains a mitigations section, recommending the implementation of regular backups, network segmentation, review of servers and user access, use of multi-factor authentication, and many more that can be achieved by adopting a ZeroTrust mindset.

Kind Regards,


[https://d3aafpijpsak2t.cloudfront.net/images/Signature/logo@2x.png]<https://www.appgate.com/>

[https://d3aafpijpsak2t.cloudfront.net/images/Signature/likedin@2x.png]<https://www.linkedin.com/company/appgate-security/>     [https://d3aafpijpsak2t.cloudfront.net/images/Signature/twitter@2x.png] <https://twitter.com/AppgateSecurity>   [https://d3aafpijpsak2t.cloudfront.net/images/Signature/youtube@2x.png] <https://www.youtube.com/channel/UC-8GvxcZbm-R3EJNl8jYjiQ>



Felipe Duarte Domingues
Security Researcher
Appgate

E: felipe.duarte at appgate.com<mailto:felipe.duarte at appgate.com>
O: +55 19 98840 2509

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.immunityinc.com/pipermail/mart/attachments/20220216/5272c8fd/attachment.htm>