FBI Flash: May 2021

Conti Ransomware Attacks Impact Healthcare and First Responder Networks

By: Federal Bureau of Investigation

Narrated by: Tom Brooks

The following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients in order to protect against cyber threats. This data is provided to help cybersecurity professionals and system administrators guard against the persistent malicious actions of cyber actors.

Conti Ransomware Attacks Impact Healthcare and First Responder Networks summary: The FBI identified at least 16 Conti ransomware attacks targeting US health-care and first-responder networks, including law enforcement agencies, emergency medical services, 9-1-1 dispatch centers, and municipalities within the last year. These health-care and first-responder networks are among the more than 400 organizations worldwide victimized by Conti, over 290 of which are located in the US. Like most ransomware variants, Conti typically steals victims’ files and encrypts the servers and workstations in an effort to force a ransom payment from the victim. The ransom letter instructs victims to contact the actors through an online portal to complete the transaction. If the ransom is not paid, the stolen data is sold or published to a public site controlled by the Conti actors. Ransom amounts vary widely and we assess are tailored to the victim. Recent ransom demands have been as high as $25 million.

©2021 Tom Brooks (P)2021 Tom Brooks