CISA Alert AA22-152A – Karakurt data extortion group. [CISA Cybersecurity Alerts]

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), the Department of the Treasury (Treasury), and the Financial Crimes Enforcement Network (FinCEN) are releasing this joint Cybersecurity Advisory to provide information about the Karakurt data extortion group, also known as the Karakurt Team and Karakurt Lair. Karakurt actors have employed a variety of TTPs, creating significant challenges for defense and mitigation. Karakurt victims have not reported encryption of compromised machines or files; rather, Karakurt actors claim …

advisory agency alert alerts cisa cisa alert crimes cybersecurity cybersecurity advisory data data extortion department enforcement extortion extortion group fbi federal federal bureau of investigation financial fincen information infrastructure infrastructure security investigation karakurt karakurt team network security team treasury