Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware
FBI and CISA warn of threats to satellite communications networks
March 21, 2022Reminder: WECC Annual Self-certifications due April 15, 2022
March 21, 2022
Summary:
An analysis of two ransomware attacks has identified overlaps in the tactics, techniques, and procedures (TTPs) between BlackCat and BlackMatter, indicating a strong connection between the two groups. While it's typical of ransomware groups to rebrand their operations in response to increased visibility into their attacks, BlackCat (aka Alphv) marks a new frontier in that the cyber crime cartel is built out of affiliates of other ransomware-as-a-service (RaaS) operations. BlackCat first emerged in November 2021 and has since targeted several organizations worldwide over the past few months. It has been called out for being similar to BlackMatter, a short-lived ransomware family that originated from DarkSide, which attracted notoriety for its high-profile attack on Colonial Pipeline in May 2021.
Additional Discussion:
Link:
