MoneyGram: No evidence ransomware is behind recent cyberattack

MoneyGram experienced a September cyberattack that forced systems offline for several days and disrupted customer transfers after attackers exploited a social-engineering compromise of the internal help desk to obtain employee credentials and access Active Directory; the intrusion was detected and blocked, and external investigators (including CrowdStrike and law enforcement) reported no evidence of ransomware. While no attribution was publicly confirmed, the techniques mirror those previously used by the Scattered Spider group.