Security News > 2022 > March > Ragnar ransomware gang hit 52 critical US orgs, says FBI
The Ragnar Locker ransomware gang has so far infected at least 52 critical infrastructure organizations in America across sectors including manufacturing, energy, financial services, government, and information technology, according to an FBI alert this week.
The crew steals sensitive data, encrypts the victim's systems, and threatens to leak the stolen documents if the ransom to restore the files isn't paid.
To date, Ragnar Locker has posted stolen data from at least ten organizations on its publicity site, according to Acronis.
The Ragnar Locker malware uses Windows API GetLocaleInfoW to identify the infected machine's location.
As the ransomware is deployed, it kills services commonly used by managed service providers to remotely control networks and attempts to silently delete all shadow copies of documents so that users can't recover encrypted files.
Finally, Ragnar Locker encrypts organizations' data.
News URL
https://go.theregister.com/feed/www.theregister.com/2022/03/09/fbi_says_ragnar_locker_ransomware/
Related news
- FBI: Play ransomware breached 900 victims, including critical orgs (source)
- FBI: US lost record $16.6 billion to cybercrime in 2024 (source)
- Ransomware scum and other crims bilked victims out of a 'staggering' $16.6B last year, says FBI (source)
- Ukrainian extradited to US for Nefilim ransomware attacks (source)
- US indicts Black Kingdom ransomware admin for Microsoft Exchange attacks (source)
- FBI: US officials targeted in voice deepfake attacks since April (source)
- Scammers are deepfaking voices of senior US government officials, warns FBI (source)
- US indicts leader of Qakbot botnet linked to ransomware attacks (source)
- Critical Fortinet flaws now exploited in Qilin ransomware attacks (source)