FBI and CISA Warn of BlackSuit Ransomware Demands Up to $500 Million

Aug 8, 2024, 06:30 AM

The FBI and CISA have issued a joint advisory warning about the BlackSuit ransomware group, formerly known as Royal ransomware. This group has been demanding ransoms as high as $500 million, with individual ransoms reaching up to $60 million. BlackSuit employs sophisticated tactics, including phishing, RDP exploits, and the use of legitimate remote monitoring and management (RMM) tools to infiltrate and maintain persistence in networks. The advisory includes indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) identified through FBI investigations and third-party reporting. Organizations are urged to review the advisory for recommended mitigations.