Security News > 2022 > March > Ragnar ransomware gang hit 52 critical US orgs, says FBI
The Ragnar Locker ransomware gang has so far infected at least 52 critical infrastructure organizations in America across sectors including manufacturing, energy, financial services, government, and information technology, according to an FBI alert this week.
The crew steals sensitive data, encrypts the victim's systems, and threatens to leak the stolen documents if the ransom to restore the files isn't paid.
To date, Ragnar Locker has posted stolen data from at least ten organizations on its publicity site, according to Acronis.
The Ragnar Locker malware uses Windows API GetLocaleInfoW to identify the infected machine's location.
As the ransomware is deployed, it kills services commonly used by managed service providers to remotely control networks and attempts to silently delete all shadow copies of documents so that users can't recover encrypted files.
Finally, Ragnar Locker encrypts organizations' data.
News URL
https://go.theregister.com/feed/www.theregister.com/2022/03/09/fbi_says_ragnar_locker_ransomware/
Related news
- MFA bypass becomes a critical security issue as ransomware tactics advance (source)
- US sanctions crypto exchanges used by Russian ransomware gangs (source)
- Akira and Fog ransomware now exploit critical Veeam RCE flaw (source)
- Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware (source)
- Critical Veeam RCE bug now used in Frag ransomware attacks (source)
- Ransomware fiends boast they've stolen 1.4TB from US pharmacy network (source)