A multi-ransomware cybercriminal group
released on 2023-09-25 @ 08:07:20 PM
In March 2023, ANSSI reported to the university hospital in Brest the compromise of one of its servers. The reactivity of the health facility has made it possible to rapidly isolate the Internet’s information system (IS) and to hamper the progress of attacker procedures (AMOs) preventing data exfiltration and SI encryption. The discovery of links with a set of incidents observed on the French perimeter and reported in open sources made it possible to link this attack to the FIN12 cybercriminal MOA.