X-Industry

Turn trusted adversary intelligence into a practical roadmap for faster, more confident threat detection. In addition to weekly cyber threat presentations and industry-segment-specific articles, this library is now available at https://www.redskyalliance.org as a service for our followers.

The MITRE ATT&CK detection library gives security teams a proven, publicly available foundation for designing detections around real adversary behaviors. By mapping detection guidance to the MITRE ATT&CK frame

US Cyber authorities are releasing this joint CSA to provide information on Black Basta, a ransomware variant whose actors have encrypted and stolen data from at least 12 out of 16 critical infrastructure  sectors, including the Healthcare and Public Health (HPH) Sector.  This joint CSA provides TTPs and IOCs obtained from FBI investigations and third-party reporting.

Black Basta is considered a ransomware-as-a-service (RaaS) variant and was first identified in April 2022.  Black Basta affiliate