I Found a Secret Hacker Team Fighting Cybercrime (they saved $1 billion)
I Found a Secret Hacker Team Fighting Cybercrime (they saved $1 billion)
A Massachusetts-based medical management company has agreed to a $100,000 settlement with the U.S. Department of Health and Human Services following a 2017 GandCrab ransomware attack
https://therecord.media/medical-firm-reaches-settlement-with-hhs
Doctors’ Management Services — which provides medical billing and payer credentialing services — was attacked by the now-defunct GandCrab ransomware gang in April 2017. The settlement with HHS is the first for the agency over a ransomware attack.
I am reading a few threat landscape and semi annual security recap reports and came across a section in one that mentioned that GandCrab was starting to become active again.
I've personally had to deal with GandCrab during an IR event in the past, so this naturally peaked my interest. In the rabbit hole that ensued, I found this awesome analysis that I wish I had 4 years ago. Happy hacking!
https://www.taintedbits.com/2018/10/18/gandcrab-detail-analysis-of-js-delivery-payload/