Cyberattacks on Government Machinery

This report documents a wave of 2022 ransomware campaigns against government organizations in the Americas and beyond: Conti’s disruptive attacks on multiple Costa Rican ministries (contributing to a national emergency), and Conti, BlackByte, and Everest operations against Peruvian government entities with large data exfiltrations and high ransom demands; it also highlights exposed government assets found on Shodan and multiple instances of stolen government data/access being sold on cybercrime forums.