U.S. and Australian Agencies Publish Joint Cybersecurity Advisory on BianLian Ransomware Group

As part of the #StopRansomware campaign, the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA) in the U.S. and the Australian Cyber Security Centre (ACSC) released a joint cybersecurity advisory (CSA AA23-136A) discussing the BianLian ransomware group. The advisory details the tactics, techniques and procedures (TTPs) and indicators of compromise (IOCs) associated with the group and its corresponding malware. In addition, the cybersecurity advisory outlines that the group may have exploited CVE-2020-1472, a privilege escalation vulnerability known as Zerologon in one of their attacks.

For more information about the CSA on the BianLian Ransomware group, including information on Tenable solutions to help identify your organizations risk, please visit our blog.