Government warns of ransomware group behind Halliburton cyberattack

TLDR:

• The RansomHub ransomware group is believed to be behind the cyberattack on Halliburton
• The US government has issued an advisory detailing RansomHub attacks

The RansomHub ransomware group is suspected to have targeted oil giant Halliburton in a recent cyberattack, as reported by reputable sources and indicators of compromise. The US government has issued an advisory in collaboration with cybersecurity agencies, highlighting the tactics and procedures used by RansomHub. The advisory also mentions that RansomHub has targeted at least 210 victims across various critical infrastructure sectors. While Halliburton has not confirmed the specific details of the attack, the government’s advisory provides insight into the ongoing threat posed by ransomware groups like RansomHub.