industryThe Nation-State Era (2010-2016) Daily Briefing

    Cybersecurity Briefing: Drovorub Malware and Ransomware Surge (Aug 7, 2020)

    Friday, August 7, 2020

    Lead Story: New Malware Drovorub Targets Linux Systems

    On August 7, 2020, the FBI issued a warning about Drovorub, a sophisticated malware strain linked to Russian military hackers. This malware specifically targets Linux systems, creating backdoors that allow attackers to maintain persistence in compromised networks. The FBI and NSA emphasized that Drovorub is being utilized in active campaigns, primarily through spear phishing emails aimed at corporate executives. Organizations are urged to enhance their security measures to detect and mitigate the risks posed by this advanced threat.

    Secondary Item 1: Ransomware Attack on R1 RCM

    In another alarming development, the medical debt collection firm R1 RCM fell victim to a ransomware attack, disrupting its services significantly. This incident raises concerns over the potential compromise of sensitive patient data, highlighting the ongoing targeting of healthcare facilities by cybercriminals during the pandemic.

    Secondary Item 2: CISA Updates on Critical Vulnerabilities

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has been actively updating its catalog of known exploited vulnerabilities. Among these, several critical flaws have been identified that threat actors are likely leveraging in ongoing attacks. Organizations are strongly advised to prioritize patching these vulnerabilities to safeguard their systems against exploitation.

    Analyst Perspective

    The events of August 7, 2020, underscore a troubling trend in cybersecurity, with sophisticated malware like Drovorub and ongoing ransomware threats targeting critical sectors such as healthcare. The intersection of state-sponsored threats and criminal activity creates a complex landscape for organizations. As cybercriminals continue to exploit vulnerabilities, the importance of robust security measures and timely patch management cannot be overstated. Organizations must remain vigilant and proactive in their defenses to mitigate these evolving threats.

    Sources

    Drovorub R1 RCM CISA ransomware malware