Cyber Alert - ALPHV BlackCat Ransomware Advisory

 

To: Healthcare Providers From: Jo Tansey, Branch Chief, Acute and Nursing Facilities,  Health Facilities and Emergency Medical Services Division A joint cybersecurity advisory has been issued by the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) that strongly advises healthcare organizations to implement the recommended mitigations to prevent a cyber attack from BlackCat/ALPHV group. While law enforcement was successful and caused a disruption for the ransomware group, the group claims it is still operational and is responding in force. The advisory includes updated information on the tactics, techniques, and procedures (TTPs) associated with the group and Indicators of Compromise (IoCs) from FBI investigations as recently as December 6, 2023.  In addition, the HIPPA Journal posted an article on December 20, ALPHV/BlackCat Claims Healthcare Restrictions Removed for Affiliates. If you experience any anomalous activity, please remember to report to the Cybersecurity & Infrastructure Security Agency (CISA) and the Colorado Information Analysis Center (CIAC) as well as the appropriate local and state authorities.