Coordinated CACTUS ransomware attack on two companies (~5 minutes from each other)

Sharing a new investigation that we've been working on; hope you find this interesting (happy to answer any questions you have).


This was a coordinated ransomware attacks by CACTUS group on two companies. Laptops from one company were present on the network of the other company, threat actors paused their attack until the second company could be infiltrated as well.





Attack was launched from internal servers on both networks within 5 minutes from each other (companies are part of the …

attack attacks cactus cactus ransomware companies coordinated cybersecurity find hope investigation laptops network questions ransomware ransomware attack ransomware attacks sharing threat threat actors working