Upcoming Webinar – Tools and Tactics to solve the top 3 Open-Source Intelligence Challenges Learn More +

Ransomware Rewind

Weekly Update: 10 January 2023

Ransomware Rewind is a compilation of ransomware-related stories published over the past week.

Most Active Ransomware Operators

Volume of messages posted by operators during the last week.

Significant Campaigns & Incidents

Documents and discussion of significant ransomware campaigns, incidents, and associated actors.

San Francisco BART investigating ransomware attackThe Record by Recorded Future – Jan 09 2023 18:04
Cyberattack on CCA systemTimes of India – Jan 07 2023 02:59
Texas County EMS Agency Says Ransomware Breach Hit 612,000DataBreachToday.eu – Jan 06 2023 21:08
Retreat Behavioral Health Announces Data BreachJD Supra – Jan 05 2023 20:32
Maternal & Family Health Services Issues Notice of Cybersecurity IncidentPR Newswire: Entertainment & Media – Jan 05 2023 15:00
Wabtec breach linked to LockBit ransomware groupSC Magazine US – Jan 04 2023 20:32

Tactics & Techniques

Discussion and mentions of significant techniques deployed by threat actors.

Researcher Analysis

Analysis, deep-dives and reverse engineering.

Monti, BlackHunt and PutinRed Sky Alliance X-Industry – Jan 09 2023 20:30
2022 Year in Review: RansomwareSpiderLabs Blog – Jan 05 2023 00:00
True cost of a Ransomware AttackMedium.com – Jan 04 2023 17:47
Ransomware Attacks on U.S. Hospitals Have Doubled Since 2016US News & World Report – Jan 04 2023 13:35

Legal Actions and Discussion

Actions, consequences, and policy discussion by governments and organisations.

The content in this report was compiled by the use of our award-winning intelligence product Silobreaker Online. Silobreaker cannot guarantee the accuracy, completeness, integrity or quality of any content in this report and no responsibility is accepted by Silobreaker in respect of such content. Readers must determine for themselves what reliance they should place on the compiled content in the report.