Friday Five 9/16

Twitter’s security scandal going from bad to worse and malware spreading through YouTube made headlines this week. Read about these stories and more in this week’s Friday Five!

---

North Korean Attackers Targeting Healthcare Orgs with Maui Ransomware

A new Cybersecurity Advisory via the FBI, CISA, and the U.S. Treasury is warning that cyber actors with the DPRK have been using the ransomware since May 2021.

---

HHS Warns of 'Exceptionally Aggressive' Hive Ransomware

The ransomware-as-a-service group has been on a tear, compromising hospitals and healthcare facilities, since June 2021.

---

AvosLocker Ransomware Targeting Critical Infrastructure

The ransomware-as-a-service group continues to target critical infrastructure in the U.S.

---

RagnarLocker Ransomware Connected to Hacks at 52 Organizations

New guidance from the FBI contains IOCs and technical details on how the ransomware spreads.

---

Federal Advisory Highlights Increased Globalized Ransomware Threat

A joint advisory on ransomware issued by the FBI, CISA, and the NSA recapped ransomware activity in 2021 and showed why the threat continues to loom large for enterprises.

---

Friday Five 1/28

The Linux PolicyKit bug, $770 million lost in social media scams, and more - catch up on the infosec news of the week with the Friday Five!

---

Ransomware Groups Turning to Insiders to Help with Attacks

A new survey suggests there's been an uptick in ransomware groups reaching out to employees in hopes they can help them carry out attacks against their company.

---

DOJ Takes Action Against Two Charged with Ransomware Attacks

The Justice Department announced this week that it arrested two involved with deploying ransomware and that it seized $6.1 million in ransom payments.

---

US Treasury Outlines Compliance Best Practices for Cryptocurrency Companies

The newly released guide is designed to emphasize sanctions compliance requirements amid the US government’s efforts to combat ransomware.

---