Axon Rapid Response - ALPHV Blackcat Ransomware CISA AA23-353A
Incident Report for Rapid Response Status Page
Resolved
This incident has been resolved.
Posted Feb 29, 2024 - 12:38 UTC
Investigating
Following the new update to alert aa23-353a by CISA, Team Axon has initiated a Rapid Response effort and investigated activities in Axon customers’ environments regarding the identification and disruption of the ALPHV Blackcat ransomware actors activity.
CISA Alert: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-353a.

As part of the Rapid Response efforts, the team conducted an IOC sweep over Axon customers’ environments based on the IOCs as provided in CISA’s alert, and time range of the last 180 days.
An Axon report with relevant information is published to customers with findings in their environment and can be found on the Hunters platform under “Axon Reports” page.

As always, feel free to reach out for any assistance and further questions.
Team Axon.
Posted Feb 29, 2024 - 12:36 UTC
This incident affected: Rapid Response.
← Current Status Powered by Atlassian Statuspage