industryThe Nation-State Era (2010-2016) Daily Briefing
Cybersecurity Briefing: Drovorub Malware and Ransomware Surge (Aug 7, 2020)
Friday, August 7, 2020
Lead Story: New Malware Drovorub Targets Linux Systems
On August 7, 2020, the FBI issued a warning about Drovorub, a sophisticated malware strain linked to Russian military hackers. This malware specifically targets Linux systems, creating backdoors that allow attackers to maintain persistence in compromised networks. The FBI and NSA emphasized that Drovorub is being utilized in active campaigns, primarily through spear phishing emails aimed at corporate executives. Organizations are urged to enhance their security measures to detect and mitigate the risks posed by this advanced threat.Secondary Item 1: Ransomware Attack on R1 RCM
In another alarming development, the medical debt collection firm R1 RCM fell victim to a ransomware attack, disrupting its services significantly. This incident raises concerns over the potential compromise of sensitive patient data, highlighting the ongoing targeting of healthcare facilities by cybercriminals during the pandemic.Secondary Item 2: CISA Updates on Critical Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has been actively updating its catalog of known exploited vulnerabilities. Among these, several critical flaws have been identified that threat actors are likely leveraging in ongoing attacks. Organizations are strongly advised to prioritize patching these vulnerabilities to safeguard their systems against exploitation.Analyst Perspective
The events of August 7, 2020, underscore a troubling trend in cybersecurity, with sophisticated malware like Drovorub and ongoing ransomware threats targeting critical sectors such as healthcare. The intersection of state-sponsored threats and criminal activity creates a complex landscape for organizations. As cybercriminals continue to exploit vulnerabilities, the importance of robust security measures and timely patch management cannot be overstated. Organizations must remain vigilant and proactive in their defenses to mitigate these evolving threats.Sources
Drovorub R1 RCM CISA ransomware malware