Change Healthcare ransomware attack (ALPHV/BlackCat)
Teaser from the source
The ALPHV/BlackCat ransomware gang got into UnitedHealth's Change Healthcare on 2024-02-12 using stolen credentials for a Citrix remote-access portal without multi-factor authentication, then deployed ransomware on 2024-02-21. Claims processing and pharmacy payments across the US health system were disrupted for weeks. By October 2024 Change Healthcare had sent about 100 million notices to individuals (later estimates were about 190 million people).
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on BlackCat
Other advisories
- HighCVE-2023-53892Blackcat CMS: uneingeschränkter Dateiupload
- MediumCVE-2023-53891Blackcat CMS: Cross-Site-Scripting (XSS)
- HighCVE-2023-53892Blackcat CMS: uneingeschränkter Dateiupload
- Not ratedosv:CVE-2023-53892Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager
- MediumCVE-2023-53891Blackcat CMS: Cross-Site-Scripting (XSS)
- Not ratedosv:CVE-2023-53891Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modification
- MediumCVE-2023-44043Blackcat CMS: Cross-Site-Scripting (XSS)
- MediumCVE-2023-44042Blackcat CMS: Cross-Site-Scripting (XSS)
Other news entries
- Prison Sentence for Ransomware Negotiator Who Betrayed His ClientsNewsSANS NewsBites
- Third US Security Expert Sentenced to Prison for Helping Ransomware GangNewsSecurityWeek
- Former ransomware negotiator gets 4 years for BlackCat attacksNewsBleepingComputer
- Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat AttacksNewsThe Hacker News
- MGM Resorts and Caesars hit by Scattered SpiderBreachpwn.watch
Source: https://pwn.watch/i/change-healthcare-ransomware-attack
ID