Several U.S. federal agencies have issued a joint cybersecurity alert to warn organizations about a data extortion group named Karakurt.
According to the alert released by the Cybersecurity and Infrastructure Security Agency (CISA), Karakurt is focused on stealing data from companies since at least June 2021 and forcing them into paying ransoms under the threat of publishing the information online. In addition, the group has employed a variety of tactics, techniques and procedures (TTPs), creating several challenges for defense and mitigation.