Rapid Response Status Page Status - Axon Rapid Response

Axon Rapid Response - Play Ransomware CISA AA23-352A

Incident Report for Rapid Response Status Page

Resolved

This incident has been resolved.

Posted Dec 19, 2023 - 16:04 UTC

Investigating

Following alert AA23-352A published by CISA, Team Axon has initiated a Rapid Response effort and investigated activities in Axon customers’ environments regarding the identification and disruption of the Play (Playcrypt) Ransomware team activity.
CISA Alert: https://www.cisa.gov//news-events/cybersecurity-advisories/aa23-352a.

As part of the Rapid Response efforts, the team conducted an IOC sweep over Axon customers’ environments based on the IOCs as provided in CISA's alert, and time range of the last 180 days.
An Axon report with relevant information is published to customers with findings in their environment and can be found on the Hunters platform under “Axon Reports” page.

As always, feel free to reach out for any assistance and further questions.

Team Axon.

Posted Dec 19, 2023 - 15:57 UTC

This incident affected: Rapid Response.