Security News > 2022 > March > Ragnar ransomware gang hit 52 critical US orgs, says FBI
The Ragnar Locker ransomware gang has so far infected at least 52 critical infrastructure organizations in America across sectors including manufacturing, energy, financial services, government, and information technology, according to an FBI alert this week.
The crew steals sensitive data, encrypts the victim's systems, and threatens to leak the stolen documents if the ransom to restore the files isn't paid.
To date, Ragnar Locker has posted stolen data from at least ten organizations on its publicity site, according to Acronis.
The Ragnar Locker malware uses Windows API GetLocaleInfoW to identify the infected machine's location.
As the ransomware is deployed, it kills services commonly used by managed service providers to remotely control networks and attempts to silently delete all shadow copies of documents so that users can't recover encrypted files.
Finally, Ragnar Locker encrypts organizations' data.
News URL
https://go.theregister.com/feed/www.theregister.com/2022/03/09/fbi_says_ragnar_locker_ransomware/
Related news
- US charges Chinese hackers linked to critical infrastructure breaches (source)
- US seizes domain of Garantex crypto exchange used by ransomware gangs (source)
- CISA: Medusa ransomware hit over 300 critical infrastructure orgs (source)
- Medusa Ransomware Strikes 300+ Targets: FBI & CISA Urge Immediate Action to #StopRansomware (source)
- US sensor giant Sensata admits ransomware derailed ops (source)
- FBI: US lost record $16.6 billion to cybercrime in 2024 (source)
- Ransomware scum and other crims bilked victims out of a 'staggering' $16.6B last year, says FBI (source)