H-ISAC TLP White Threat Bulletin: Joint Cybersecurity Advisory - Karakurt Data Extortion Group June 1, 2022

Health-ISAC is distributing the following threat bulletin regarding recently observed malicious activity enacted by the Karakurt data extortion group also known as the Karakurt Team and Karakurt Lair. The threat actors tend to utilize ambiguity within their operations as they rely on a variety of tactics, techniques, and procedures (TTPs) creating significant challenges for defense and mitigation. Instead of encrypting compromised systems, Karakurt actors claim to steal data and threaten to auction it off or release the information to the public unless they receive payment by a certain deadline with ransom demands typically ranging from $25,000 to $13,000,000 in Bitcoin.

View the detailed bulletin, and the advisory below.