The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) confirmed that a cyberattack compromised a system containing information on its investigation targets, with the prolific ransomware group Qilin claiming responsibility for the incident. The ATF stated that the attack was isolated to a standalone system and had not affected critical operations. The incident highlights ongoing threats to federal law enforcement infrastructure and the continued targeting of government agencies by sophisticated ransomware operators.
Read full article at CyberScoop ↗Qilin has emerged as the dominant ransomware-as-a-service operation as the cybercriminal landscape undergoes consolidation around major players. This shift represents a significant realignment in the ransomware market, with larger operations gaining prominence over the fragmented threat ecosystem that existed previously.
The Bureau of Alcohol, Tobacco, Firearms and Explosives has confirmed a cyber incident classified as major, with the Department of Justice assisting in the ongoing investigation. A ransomware group has claimed responsibility for the attack against the federal agency.
Aurora ransomware operators are leveraging SpaceX's Cursor Agent AI tool to automate reconnaissance and exploitation tasks as part of their ransomware campaigns. This represents a notable shift in adversary tradecraft, with threat actors weaponizing legitimate AI development tools to enhance their operational capabilities.
Protect your Australia- and New Zealand-based retail business from cyber threats. Learn five key decisions to secure identities, manage dependencies and ensure trading continuity against ransomware