Last Week in Ransomware: 07.08.2024
ID: c844e23b-7b9c-547f-8b93-b8ef077ab9d1
STIX ID: report--c844e23b-7b9c-547f-8b93-b8ef077ab9d1
Feed Name: Halcyon Blog
A Halcyon.ai roundup details a major ransomware/data-exfiltration incident at Lurie Children’s Hospital affecting ~750,000 patients (600 GB stolen, sensitive PII and medical records exposed) claimed by Rhysida, and describes a newly observed operator “Volcano Demon” using LukaLocker (Windows/Linux, Chacha8, ECDH Curve25519, API obfuscation, log clearing, double extortion). The piece also discusses the impracticality of a blanket ransom-payment ban and recommends improving cyber resilience metrics and defenses for critical sectors like healthcare.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.