Security News > 2021 > September > FBI, CISA, and NSA warn of escalating Conti ransomware attacks

CISA, the Federal Bureau of Investigation, and the National Security Agency warned today of an increased number of Conti ransomware attacks targeting US organizations.
The three US federal agencies urge enterprise IT admins to review their organizations' network security posture and implement the immediate actions outlined in the joint advisory to defend against Conti ransomware.
Conti ransomware operators have been behind over 400 attacks that hit US and international entities, according to the three agencies.
"The Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation have observed the increased use of Conti ransomware in more than 400 attacks on U.S. and international organizations," the advisory reads.
"In typical Conti ransomware attacks, malicious cyber actors steal files, encrypt servers and workstations, and demand a ransom payment."
Although the DoH blocked Conti from encrypting its systems, the HSE was not as lucky and was forced to take down all IT systems to prevent the ransomware from spreading throughout its network.
News URL
Related news
- Texas State Bar warns of data breach after INC ransomware claims attack (source)
- CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks (source)
- CISA Warns of CentreStack's Hard-Coded MachineKey Vulnerability Enabling RCE Attacks (source)
- Sensata Technologies hit by ransomware attack impacting operations (source)
- Ransomware attack cost IKEA operator in Eastern Europe $23 million (source)
- Kidney dialysis firm DaVita hit by weekend ransomware attack (source)
- CISA tags SonicWall VPN flaw as actively exploited in attacks (source)
- Ahold Delhaize confirms data theft after INC ransomware claims attack (source)
- Interlock ransomware gang pushes fake IT tools in ClickFix attacks (source)
- Ransomware scum and other crims bilked victims out of a 'staggering' $16.6B last year, says FBI (source)