Prisma Cloud Security Research

Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware

In July 2024, the operational technology (OT)-centric malware FrostyGoop/BUSTLEBERM became publicly known, after attackers used it to disrupt critical infrastructure. The outage occurred after the Cyber Security Situation Center (CSSC), affiliated with the Security Service of Ukraine, disclosed details [PDF] of an attack on a municipal energy company in Ukraine in early 2024.

Nov 20, 2024
By Unit 42