FBI: PLAY RANSOMWARE BREACHED 900 VICTIMS, INCLUDING CRITICAL ORGS

Summary from the TLDR InfoSec newsletter

In a joint effort with CISA and the Australian Cyber Security Centre, the FBI has stated that the Play ransomware gang has breached roughly 900 organizations as of May. The Play Ransomware-as-a-Service (RaaS) operation threatens organizations, saying that it will release stolen information on its leak site to pressure victims into paying. Play is also notable in that it negotiates with victims over email as opposed to a Tor negotiations page and each infection uses recompiled malware to complicate detection.