The group has resumed attacks on critical infrastructure targets in the United States.
The US authorities are sounding the alarm due to the revival of the ALPHV/BlackCat ransomware program targeting the healthcare sector.
According to a notification from federal agencies, among the nearly 70 organizations compromised since mid-December 2023, the most frequent victims were healthcare institutions. The increased interest in hospitals is associated with the ALPHV/BlackCat administrator's call for partners to actively attack medical institutions after a series of operations against the group and its infrastructure at the end of 2023.
Despite the capture of ALPHV's infrastructure by law enforcement agencies, the group managed to regain control of it by switching to a new data leak portal on the TOR network, which continues to function.
In recent weeks, attacks on critical infrastructure organizations have also increased, including one of the leading financial companies Prudential Financial, the Trans-Northern Pipelines oil pipeline and the health insurance company Change Healthcare. In response to the growing attacks, the US government announced a reward of up to $10 million. for information that will lead to the identification of key participants and partners of ALPHV.
Among the most well-known ALPHV attacks is the extortion against MGM Resorts and Caesars Entertainment in September last year. Despite the FBI's claims of blocking the group's network infrastructure in December, ALPHV said it was restoring access to its resources and lifting restrictions on attacks against US government and military enterprises.
Subsequently, the Pentagon began investigating ALPHV's claims of theft of documents containing sensitive data related to the US Armed Forces. The group threatened to release 300 GB of data stolen from the IT company Technica from Virginia, which is engaged in servicing the US federal government.
The US authorities are sounding the alarm due to the revival of the ALPHV/BlackCat ransomware program targeting the healthcare sector.
According to a notification from federal agencies, among the nearly 70 organizations compromised since mid-December 2023, the most frequent victims were healthcare institutions. The increased interest in hospitals is associated with the ALPHV/BlackCat administrator's call for partners to actively attack medical institutions after a series of operations against the group and its infrastructure at the end of 2023.
Despite the capture of ALPHV's infrastructure by law enforcement agencies, the group managed to regain control of it by switching to a new data leak portal on the TOR network, which continues to function.
In recent weeks, attacks on critical infrastructure organizations have also increased, including one of the leading financial companies Prudential Financial, the Trans-Northern Pipelines oil pipeline and the health insurance company Change Healthcare. In response to the growing attacks, the US government announced a reward of up to $10 million. for information that will lead to the identification of key participants and partners of ALPHV.
Among the most well-known ALPHV attacks is the extortion against MGM Resorts and Caesars Entertainment in September last year. Despite the FBI's claims of blocking the group's network infrastructure in December, ALPHV said it was restoring access to its resources and lifting restrictions on attacks against US government and military enterprises.
Subsequently, the Pentagon began investigating ALPHV's claims of theft of documents containing sensitive data related to the US Armed Forces. The group threatened to release 300 GB of data stolen from the IT company Technica from Virginia, which is engaged in servicing the US federal government.
