Last Week in Ransomware: 12.16.2024

Multiple high-impact ransomware-related incidents were reported: Black Basta targeted BT Group’s conferencing division and claims to have exfiltrated sensitive files, Electrica (a major Romanian energy provider) is responding to an active ransomware incident with operational systems reportedly protected, and the U.S. Treasury sanctioned Chinese firm Sichuan Silence for exploiting a Sophos XG zero-day (CVE-2020-12271) tied to widespread Ragnarok ransomware deployments affecting tens of thousands of firewalls.