FBI Cautions Organizations On Dual Ransomware Attacks

The Federal Bureau of Investigation (FBI) issued a Private Industry Notification on September 27, 2023, highlighting two concerning ransomware trends and providing companies with guidance on mitigating potential threat actor activity.

As of July 2023, the FBI observed multiple ransomware attacks where two attacks against the same victim involving different ransomware variants are deployed often within 48 hours of one another. Ransomware variants include different combinations of AvosLocker, Diamond, Hive, Karakurt, LockBit, Quantum, and Royal. "Second ransomware attacks against an already compromised system could significantly harm victim entities," said the FBI. These dual ransomware attacks have resulted in a combination of data encryption, exfiltration, and financial losses from ransom payments.