IronNet’s July Threat Intelligence Brief 2022

On June 18th, an IronNet customer in the education sector was targeted in a ransomware attack. Initial investigation of the compromise points to the BlackCat ransomware group as the possible threat actor behind this intrusion. It is unclear at this time how the threat actors gained initial access; however, we did observe a spike in scanning prior to the compromise through our external and internal port scanning analytics. After that, we saw the attackers establishing a foothold through an independent …

intelligence ironnet july threat threat intel briefs threat intelligence