H-ISAC TLP White 2021 Trends Show Increased Globalized Threat of Ransomware February 9, 2022

Health-ISAC is distributing a threat bulletin regarding the collaborative work of the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the National Security Agency (NSA), the Australian Cyber Security Centre (ACSC), and the United Kingdom’s National Cyber Security Centre (NCSC-UK) provided in a Joint Cybersecurity Advisory (CSA) alert (AA22-040A).

In 2021, cybersecurity authorities in the United States, Australia, and the United Kingdom observed an increase in sophisticated, high-impact ransomware incidents targeting critical infrastructure organizations globally. Additionally, the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Agency (NSA) observed incidents involving ransomware against 14 of the 16 US critical infrastructure sectors, including the Defense Industrial Base, Emergency Services, Food and Agriculture, Government Facilities, and Information Technology Sectors.

The Australian Cyber Security Centre (ACSC) observed continued ransomware targeting of Australian critical infrastructure entities including the healthcare and medical, financial services and markets, higher education and research, and energy sectors. The United Kingdom’s National Cyber Security (NCSC-UK) recognizes ransomware as the largest cyber threat facing the United Kingdom with education as one of the top UK sectors targeted by ransomware actors coupled with leveraging attacks against businesses, charities, the legal profession, and public services in the Local Government and Health Sectors.

Health-ISAC is sharing this alert due to the observed continuous evolution of ransomware tactics and techniques in 2021 which is indicative of threat actors’ growing technological sophistication and an increased ransomware threat to organizations globally.

All members are encouraged to review 2021 Trends Show Increased Globalized Threat of Ransomware, which has been attached to this alert.

View the detailed report below.