Threat Source newsletter (Oct. 21, 2021)
Summary: CISA, the FBI and the NSA released a joint advisory this week warning that BlackMatter ransomware could strike major organizations or public sector targets, and stating that BlackMatter is likely a successor to DarkSide, the group behind the Colonial Pipeline attack. The advisory says BlackMatter has already targeted two large U.S. food cooperatives and recommends multi-factor authentication and stronger credential rules.
What's compelling: The same federal agencies that tracked DarkSide now name BlackMatter as its likely successor, and two large food cooperatives are already in the reported target list - a reminder that critical suppliers sit in the blast radius, not just the headline victims.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026