Ghost Ransomware Group Targets Key Sectors in North America and U.K.

The Ghost ransomware group, a Chinese cybercriminal organization, is increasingly targeting sectors like government, healthcare, energy, and financial services, primarily in North America and the U.K., with a focus on profit-driven attacks rather than state-sponsored espionage. A joint advisory from the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warns organizations in more than 70 countries of the group's tactics, which include exploiting unpatched vulnerabilities in public-facing systems and deploying ransomware that encrypts data and threatens permanent loss if a ransom is not paid. The group's rebranding efforts complicate detection and tracking, making their activities a significant cybersecurity concern.

Opens on Forbes