BlackMatter Ransomware Affects Financial Institutions

The Cyble Research Lab identified a BlackMatter ransomware attack against Pine Labs (reported August 2021) that resulted in exfiltration and public posting of internal documents, agreements with financial institutions, and over 500,000 customer contact records; the report includes SHA-256 hashes, malicious domains and a .onion leak URL as IoCs and offers mitigation recommendations such as MFA, patching, and monitoring.