#StopRansomware: ALPHV Blackcat 19 Dec 2023

ronjor · Dec 19, 2023

Release Date December 19, 2023

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint CSA to disseminate known IOCs and TTPs associated with the ALPHV Blackcat ransomware as a service (RaaS) identified through FBI investigations as recently as Dec. 6, 2023.
Click to expand...

FanJ · Dec 20, 2023

Thanks Ron.

There is also this Press Release :
Justice Department Disrupts Prolific ALPHV/Blackcat Ransomware Variant
https://www.justice.gov/opa/pr/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant
Tuesday, December 19, 2023

FBI Offers Decryption Tool to Over 500 Victims Around the World, Additional Victims Encouraged to Come Forward
Click to expand...

FanJ · Feb 16, 2024

FBI - February 15, 2024

U.S. Department of State Announces Reward Offers for Criminal Associates of The ALPHV/Blackcat Ransomware Variant
https://www.state.gov/u-s-departmen...tes-of-the-alphv-blackcat-ransomware-variant/

Today, the Department of State is announcing reward offers of up to $10 million for information leading to the identification or location of anyone who holds a key leadership position in the Transnational Organized Crime (TOC) group behind the ALPHV/Blackcat Ransomware variant and up to $5 million for information leading to the arrest or conviction of anyone participating in or conspiring or attempting to participate in a ransomware attack using the ALPHV/Blackcat variant.
Click to expand...

PS:
I don't know why the FBI requires the Tor browser in case a person would like to respond.

ronjor · Feb 27, 2024

CISA, FBI, and HHS Release an Update to #StopRansomware Advisory on ALPHV Blackcat 27 Feb 2024

Release Date February 27, 2024
Today, CISA, the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS) released an update to the joint advisory #StopRansomware: ALPHV Blackcat to provide new indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with the ALPHV Blackcat ransomware as a service (RaaS). ALPHV Blackcat affiliates have been observed primarily targeting the healthcare sector.
Click to expand...

FanJ · Mar 5, 2024

BlackCat ransomware shuts down in exit scam, blames the "feds"
BleepingComputer - March 5, 2024
https://www.bleepingcomputer.com/ne...ware-shuts-down-in-exit-scam-blames-the-feds/

The BlackCat ransomware gang is pulling an exit scam, trying to shut down and run off with affiliates’ money by pretending the FBI seized their site and infrastructure.
The gang announced they are now selling the source code for the malware for the hefty price of $5 million.
On a hacker forum, ALPHV said that they decided "to close the project" because of "the feds," without providing additional details or a clarification.
However, a national law enforcement agency listed on the seizure banner confirmed to BleepingComputer that they were not involved in any recent disruption of ALPHV infrastructure.
Click to expand...

Ransomware expert Fabian Wosar told BleepingComputer that the ransomware gang simply setup a Python SimpleHTTPServer to serve the fake banner.
"So they simply saved the takedown notice from the old leak site and spun up a Python HTTP server to serve it under their new leak site. Lazy," Fabian Wosar told BleepingComputer.
Additionally, Wosar says that his contacts at Europol an the NCA "declined any sort of involvement" in seizing the ALPHV ransomware site.
Click to expand...

Read there more.

Log in or Sign up

#StopRansomware: ALPHV Blackcat 19 Dec 2023

ronjor Global Moderator

FanJ Updates Team

FanJ Updates Team

ronjor Global Moderator

FanJ Updates Team

Log in or Sign up

#StopRansomware: ALPHV Blackcat 19 Dec 2023

ronjor Global Moderator

FanJ Updates Team

FanJ Updates Team

ronjor Global Moderator

FanJ Updates Team

Useful Searches