Rapid Response Status Page Status - Axon Rapid Response

Axon Rapid Response - Rhysida Ransomware CISA AA23-319A

Incident Report for Rapid Response Status Page

Resolved

This incident has been resolved.

Posted Nov 16, 2023 - 19:21 UTC

Investigating

Following alert AA23-319A published by CISA, Team Axon has initiated a Rapid Response effort and investigated activities in Axon customers’ environments regarding the identification and disruption of the Rhysida Ransomware team activity.
CISA Alert: https://www.cisa.gov//news-events/cybersecurity-advisories/aa23-319a.

As part of the Rapid Response efforts, the team conducted an IOC sweep over Axon customers’ environments based on the IOCs as provided in CISA's alert, and time range of the last 60 days.
An Axon report with relevant information is published to customers with findings in their environment and can be found on the Hunters platform under “Axon Reports” page.

As always, feel free to reach out for any assistance and further questions.

Team Axon.

Posted Nov 16, 2023 - 19:02 UTC

This incident affected: Rapid Response.