
A Russian national, accused of being an administrator for the Phobos ransomware group, has been extradited to the United States. This group has allegedly extorted millions of dollars from over a thousand victims, including hospitals. The Department of Justice announced the extradition on Monday, highlighting the ongoing efforts to combat cybercrime. Meanwhile, the ransomware ecosystem is evolving with groups like BianLian adopting new tactics, moving away from traditional encryption-based ransomware to data extortion strategies. This shift is part of a broader trend in the ransomware landscape, where smaller, more agile operators are gaining dominance, as noted by Corvus in their Q3 2024 Security Bite report. The FBI, along with CISA and other partners, has released an updated joint Cybersecurity Advisory to disseminate the TTPs and indicators of compromise related to BianLian.
Advisory warns of activity by BianLian ransomware group: https://t.co/JyjNHajlF7 #AHAToday
The current ransomware landscape is fascinating. We're increasingly seeing a shift in dominance as RaaS affiliates are moving away from BitLocker, ALPHV, etc and toward smaller more agile operators, per Corvus. Read Security Bite ✍️ https://t.co/rivt6wdy16
Security Bite: Ransomware groups surge in Q3 2024, with shifting dominance https://t.co/4nMR7OF9AQ by @arinwaichulis

