Maui Ransomware Attacking Healthcare | Security Insights By PurpleSec

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of the Treasury released a joint Cybersecurity Advisory (CSA) to provide information on Maui ransomware, which is claimed to have been used by North Korean state-sponsored cyber actors since at least May 2021 to target Healthcare and Public Health (HPH) Sector organizations.

In June 2022, the Stairwell research team investigated one of lesser-known ecosystems of Ransomware-as-a-Service, the Maui ransomware.

Maui has been shown to have a lack of several key features which are commonly seen with tooling from RaaS providers, such as an embedded ransom note to provide recovery instructions or automated means of transmitting encryption keys to attackers.

Chapters
---------------
00:00 - Summary Of The Attack
00:53 - What Happened?
02:03 - What Is Maui Ransomware?
03:14 - How Does Maui Work?
03:50 - How Maui Encrypts Data
04:55 - How To Prevent Maui Ransomware

About Our Expert
----------------------------
Dušan Trojanović
https://purplesec.us/cyber-security-e...

Resources
------------------
► Recent Data Breaches: https://purplesec.us/security-insight...
► Preventing Ransomware Attacks: https://purplesec.us/identify-prevent...
► PurpleSec’s Cyber Security Maturity Model: https://purplesec.us/learn/
► Build A Vulnerability Management Program: https://purplesec.us/learn/vulnerabil...

Sources
-------------
► https://www.cisa.gov/uscert/ncas/aler...
► https://blog.malwarebytes.com/ransomw...
► https://socprime.com/blog/maui-ransom...
► https://stairwell.com/wp-content/uplo...

Related Videos
------------------------
► Hertzbleed Attacking Intel & AMD CPUs:    • Hertzbleed Attack Impacting Intel & AMD CP...  
► PACMAN M1 Chip Attack:    • PACMAN M1 Chip Attack Explained | Security...  
► Cleartrip's Massive Data Breach:    • Cleartrip Suffers Massive Data Breach | Se...  
► Conti Ransomware Attack:    • Conti Costa Rica Ransomware Attack Explain...  
► Kaseya Ransomware Attack:    • Kaseya Ransomware Attack Explained: What Y...  
► Saudi Aramco $50 Million Data Breach:    • Saudi Aramco $50 Million Data Breach Expla...  

#Maui #Ransomware #Healthcare