Zona de Azar USA – FBI Unveils Tool to Counter Ransomware Linked to Cyberattack on MGM

USA.- December 20th 2023 www.zonadeazar.com A coalition of U.S. and European law enforcement agencies has successfully disrupted one of the largest ransomware operations currently active, according to the Justice Department. The ransomware, known as Alphv, gained notoriety for its role in the September cyberattack against MGM Resorts. The attack forced MGM to shut down significant portions of its computer systems, resulting in casino floor closures, inoperable hotel keycards, and internal email outages, with an estimated cost of around $100 million.

In response to this threat, the Justice Department has released a decryption tool to assist victims in freeing their computer systems from Alphv’s malicious software. Alphv has not only targeted MGM but has also been deployed against various U.S. hospitals and local governments in the past year.

Ransomware attacks typically exert pressure on victims by encrypting computers and publishing hacked material on the dark web. Alphv, along with a related ransomware strain called Blackcat, has collectively collected over $200 million in ransom payments since late 2021, as reported by Chainalysis, a cryptocurrency payment tracking company.

Tuesday’s action aims to counter these tactics. The Alphv website, previously used to display victim files, now bears a banner indicating that it has been seized by law enforcement.

The collaboration between Alphv developers and the hackers behind the MGM attack represents a significant escalation in cybercriminal groups working together. The FBI is actively investigating the English-speaking hackers who gained initial access to MGM operations but has not yet announced any action against them.

Alphv, with ties to previous ransomware strains, including the one that targeted Colonial Pipeline in 2021, poses a persistent threat. Despite the Justice Department’s intervention, the group behind Alphv primarily operates in Russia, beyond the reach of Western law enforcement. Russian ransomware operators often face few penalties within the country, making lasting effects from the Justice Department’s disruption uncertain.

Edited by: @MaiaDigital www.zonadeazar.com