The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Department of Health and Human Services (HHS), and Multi-State Information Sharing and Analysis Center (MS-ISAC) have released a joint cybersecurity advisory as part of their #StopRansomware actions.
The warning covers the Interlock ransomware attacks. According to the FBI, the actors target business, critical infrastructure, and other organizations in North America and Europe based on “opportunity” and money.
What Interlock ransomware encryptors for Windows and Linux systems are doing, according to the agencies:
- Encrypting virtual machines
- Gaining access via drive-by download from compromised legitimate websites
- Gaining access via ClickFix social engineering technique
- Forcing victims to pay a ransom to keep their data from being shared
The agencies list various precautions organizations can take to help prevent these attacks.
