Ongoing Ransomware Campaign Against Cisco ASA VPN Appliances

Arctic Wolf has been tracking multiple intrusions where Cisco VPN account credentials were harnessed by Akira ransomware for initial access. In a recent Cisco PSIRT advisory, Cisco stated they were aware of reports that Akira ransomware threat actors have been targeting Cisco VPNs that are not configured for multi-factor authentication to infiltrate organisations. Our case … Ongoing Ransomware Campaign Against Cisco ASA VPN Appliances

Article Link: Ongoing Ransomware Campaign Against Cisco ASA VPN Appliances - Arctic Wolf

1 post - …

access account advisory akira akira ransomware arctic arctic wolf asa authentication aware campaign cisco cisco asa cisco psirt cisco vpn credentials factor initial access multi-factor multi-factor authentication psirt ransomware reports targeting threat threat actors tracking vpn vpns wolf