Ransomwarehigh

FBI's investigation accidentally revealed the HelloKitty ransomware gang operates out of Ukraine

Security Affairsby @securityaffairsDec 15, 2021 · 20:16 UTC (Dec 15, 2021)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-20016 CVE-2021-20021 CVE-2021-20022 CVE-2021-2002

Tags: cve-2021-20016 cve-2021-20021 cve-2021-20022 cve-2021-2002 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20016	Unauthenticated SQL Injection in SonicWall SMA100 SSL VPN	9.8	40%	KEVRansomware	Feb 4, 2021 KEV Nov 3, 2021
CVE-2021-2002	Vulnerability in the MySQL Server product of Oracle MySQL (component	4.9	3%		Jan 20, 2021
CVE-2021-20021 +1 related CVE CVE-2021-20022	Improper Privilege Management in SonicWall Email Security 10.0.9.x Grants Admin Access	9.8 group max	89%	KEVRansomware	Apr 9, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

While investigating a data breach suffered by a healthcare organization, FBI accidentally revealed that it believes that the HelloKitty ransomware gang operates out of Ukraine. The investigation conducted by FBI on a recent data breach suffered by an Oregon healthcare organization lead to the accidental revelation that the FBI believes that the HelloKitty ransomware gang (Five Hands) operates out of Ukraine.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.