CISA Alert AA22-187A North Korean state-sponsored cyber actors use Maui ransomware to target the healthcare and public health sector. [CISA Cybersecurity Alerts]

Published: July 6, 2022, 9:35 p.m.

The FBI, CISA, and the Department of the Treasury are releasing this joint Cybersecurity Advisory to provide information on Maui ransomware, which has been used by North Korean state-sponsored cyber actors since at least May 2021 to target Healthcare and Public Health Sector organizations.\nAA22-187A Alert, Technical Details, and Mitigations\nStairwell Threat Report: Maui Ransomware\nNorth Korea Cyber Threat Overview and Advisories\nUpdated Advisory on Potential Sanctions Risks for Facilitating Ransomware Payments\nNational Conference of State Legislatures: Security Breach Notification Laws\nHealth Breach Notification Rule\nProtecting Sensitive and Personal Information from Ransomware-Caused Data Breaches\nStopRansomware.gov\nCISA-Multi-State Information Sharing and Analysis Center (MS-ISAC) Joint Ransomware Guide\n\nAll organizations should report incidents and anomalous activity to CISA\u2019s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI\u2019s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.\nLearn more about your ad choices. Visit megaphone.fm/adchoices