lockbit2 attacks asp.messina
Incident Date:
April 21, 2022
Overview
Title
lockbit2 attacks asp.messina
Victim
asp.messina
Attacker
Lockbit2
Location
First Reported
April 21, 2022
Asp.Messina: A Healthcare Services Provider Targeted by Lockbit2 Ransomware
Asp.Messina, a healthcare services provider, has been targeted by the Lockbit2 ransomware group. The company operates in the Healthcare Services sector and has a website at asp.messina.it. The size of the company and its specific vulnerabilities are not explicitly mentioned in the search results. However, the healthcare sector is a common target for ransomware attacks due to the sensitive nature of the data they handle, which can be used for extortion or sold on the dark web.
Ransomware attacks typically involve three stages: gaining access to the target system, encrypting the files, and demanding a ransom payment. The most common infection vectors include phishing emails and exploiting vulnerabilities in Remote Desktop Protocol (RDP). In the case of Asp.Messina, it is unclear how the Lockbit2 group gained access to their systems.
To mitigate the risk of ransomware attacks, organizations should take steps to reduce their attack surface by addressing vulnerabilities, implement anti-ransomware solutions, and educate employees about phishing emails and safe browsing practices.
Sources
- FBI: Ransomware
- Check Point: Ransomware Attack
- Core Security: Ransomware Overview
- ZDNet: What is ransomware?
- NY Times: Ransomware Attack Disrupts Health Care in at Least Three States
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.