Storm⚡Watch: Unplugged — May 7th, 2024

Summary: GreyNoise's Storm⚡Watch published an async edition for May 7, 2024, while half its crew was out at RSA, and cited the FBI IC3 2023 report showing over 2,825 ransomware complaints, an 18% increase from 2022, with reported losses up 74% from $34.3 million to $59.6 million. The post also described the Change Healthcare incident, in which criminals used compromised credentials to remotely access a Citrix portal without multifactor authentication on February 12, and noted the company paid a $22 million ransom.
Bottom line: A threat actor now holds $22 million in funding to run credential-stuffing campaigns against other internet-facing servers, and the source notes there is no way to know whether the stolen data was deleted.

Read the original at GreyNoise Blog ↗