CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) have released a joint Cybersecurity Advisory (CSA) alerting organizations of increased Conti ransomware attacks. Malicious cyber actors use Conti ransomware to steal sensitive files from domestic and international organizations, encrypt the targeted organizations’ servers and workstations, and demand a ransom payment from the victims.
CISA, FBI, and NSA encourage network defenders to examine their current cybersecurity posture and apply the recommended mitigations in the joint CSA, which include:
- Updating your operating system and software,
- Requiring multi-factor authentication, and
- Implementing network segmentation.
Additionally, review the U.S. government resource StopRansomware.gov for more guidance on ransomware protection, detection, and response.
This product is provided subject to this Notification and this Privacy & Use policy.