Some of its alleged victims include Frontier Communications, Rite Aid, the Florida Department of Health, and others.
The FBI and several other federal agencies issued a joint advisory on a ransomware service and website that has targeted 210 organizations in recent months.
In a joint bulletin released on Aug. 29, the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Health and Human Services said that a ransomware gang called RansomHub has been behind at least 210 successful cyberattacks since February, targeting industry sectors involving water, wastewater, information technology, health care, government services, and more.
The group uses what the agencies called a “double-extortion model by encrypting systems and exfiltrating data” to extract a ransom payment from their victims, the bulletin said.
Instead of sending victims a note with a ransom demand or payment instructions, RansomHub asks victims to contact it via a unique dark web URL, according to the bulletin.
The victims are then told to pay the ransom between three and 90 days after the cyberattack. If they do not comply, the data is then published on the RansomHub leak website that is accessible via Tor, according to the agencies.
The FBI advised all organizations to take the RansomHub