ransomware
The attack has been claimed by the prolific LockBit group, which has hit numerous high-profile companies in recent months, often using unpatched Citrix Bleed vulnerabilities.
"Over 102.4 million records were breached via ransomware attacks on tech companies in 2023–a staggering 2,300 percent increase on 2022’s figure of 4.26 million. It’s also the highest number recorded across any industry since we began tracking confirmed ransomware attacks in 2018..."
"Simulate and exercise breach readiness, especially abilities to reduce blast radius of a cyber attack. Involve top leadership, the board, and customers in separate cyber war games, as often as practical..."
The US department of justice has busted up a prolific ransomware as a service ring that targeted hundreds of companies
Attacker "disrupted… business operations by encrypting some IT systems, and stole data from the company"
Hey criminals! Fire an HTTP GET request. Grab system memory including session cookies issued post-authentication. Don't worry about logs. Pillage and loot. Thanks, Citrix.
Courier dispatched with a USB stick carrying trade settlement details after systems disrupted...
"We are actively investigating the incident and coordinating with law enforcement and regulatory authorities.”