Security News > 2022 > October > BlackCat malware lashes out at US defense IT contractor

The BlackCat ransomware gang, also known as ALPHV, has allegedly broken into IT firm NJVC, a provider of services to civilian US government agencies and the Department of Defense.

DarkFeed, which monitors the dark web for ransomware intelligence, tweeted this week that BlackCat had added NJVC to its victims' list, along with sharing a screenshot allegedly of ALPHV's blog notifying NJVC that it had stolen data during its intrusion.

"We strongly recommend that you contact us to discuss your situation. Otherwise, the confidential data in our possession will be released in stages every 12 hours. There is a lot of material," ALPHV said, per the screenshot.

Maybe someone realized publishing US Department of Defense data was a bad long-term career move? Or some agreement was come to.

Why keep all those found bugs a secret instead of holding them up as a demonstration of US Cold War duplicity? The likely explanation, Dorfman said, is that the KGB knew the US had just as much to throw back at it.

If users with the feature enabled click the "Show Password" button available on many websites, Chrome and Edge will send that valuable data out.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/10/02/in-brief-security/