BlackCat

BlackCat, also known as Alphv, is a Russian-based ransomware-as-a-service group that has recently targeted organizations in the healthcare and academic sectors. Lehigh Valley Health Network (LVHN), which operates 13 hospitals and numerous physician practices and clinics in eastern Pennsylvania, reported being hit with an attack by BlackCat. NextGen Health and PharmaCare Services were among the alleged recent victims listed on BlackCat's leak data site. BlackCat's tooling is constantly changing as they cycle through testing/usage, updating their arsenal frequently. The group demanded a ransom payment from LVHN, but the organization refused to pay. BlackCat has threatened to publish stolen data from Reddit servers if their demands are not met. The group claims to have successfully breached Reddit servers on February 5, 2023, and exfiltrated a total of 80GB of zipped data. In response to BlackCat's demands, Reddit withdrew its API pricing changes, while refusing to pay the $4.5 million ransom demanded by the group. BlackCat's current tactics seem to involve making the most of the current media attention on Reddit and using it to their advantage.