Security News > 2022 > August > Three ransomware gangs consecutively attacked the same network

Hive, LockBit and BlackCat, three prominent ransomware gangs, consecutively attacked the same network, according to Sophos.

"Multiple attackers create a whole new level of complexity for recovery, particularly when network files are triple encrypted. Cybersecurity that includes prevention, detection and response is critical for organizations of any size and type-no business is immune."

In the past, when multiple attackers have targeted the same system, the attacks usually occurred across many months or multiple years.

The attacks described in Sophos' whitepaper took place within days or weeks of each other-and, in one case, simultaneously-often with the different attackers accessing a target's network through the same vulnerable entry point.

In the attack involving the three ransomware groups, for example, BlackCat-the last ransomware group on the system-not only deleted traces of its own activity, but also deleted the activity of LockBit and Hive.

In most of the cases involving multiple attackers, the victims failed to remediate the initial attack effectively, leaving the door open for future cybercriminal activity.

News URL

https://www.helpnetsecurity.com/2022/08/09/ransomware-gangs-attacks/