News and Analysis

The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have issued a joint advisory warning about the Rhysida ransomware group. Active since May 2023, the group has targeted organizations across several industries. It also operates in a ransomware-as-a-service (RaaS) model, providing ransomware tools and infrastructure for a share of any ransoms paid. The advisory details tactics used by Rhysida, includes information on associated indicators of compromise (IoCs), and offers mitigation advice.