Hunters Rapid Response incident

Axon Rapid Response - Rhysida Ransomware CISA AA23-319A

Resolved after 19 minutes, affecting Rapid Response, on November 16, 2023.

investigating Nov 16, 2023, 07:02 PM UTC

Following alert AA23-319A published by CISA, Team Axon has initiated a Rapid Response effort and investigated activities in Axon customers’ environments regarding the identification and disruption of the Rhysida Ransomware team activity. CISA Alert: https://www.cisa.gov//news-events/cybersecurity-advisories/aa23-319a. As part of the Rapid Response efforts, the team conducted an IOC sweep over Axon customers’ environments based on the IOCs as provided in CISA's alert, and time range of the last 60 days. An Axon report with relevant information is published to customers with findings in their environment and can be found on the Hunters platform under “Axon Reports” page. As always, feel free to reach out for any assistance and further questions. Team Axon.

Started
Nov 16, 2023, 07:02 PM UTC
Resolved
Nov 16, 2023, 07:21 PM UTC
Duration
19m
Detected by Pingoru
Nov 16, 2023, 07:02 PM UTC

Affected components

Rapid Response

Update timeline

  1. investigating Nov 16, 2023, 07:02 PM UTC

    Following alert AA23-319A published by CISA, Team Axon has initiated a Rapid Response effort and investigated activities in Axon customers’ environments regarding the identification and disruption of the Rhysida Ransomware team activity. CISA Alert: https://www.cisa.gov//news-events/cybersecurity-advisories/aa23-319a. As part of the Rapid Response efforts, the team conducted an IOC sweep over Axon customers’ environments based on the IOCs as provided in CISA's alert, and time range of the last 60 days. An Axon report with relevant information is published to customers with findings in their environment and can be found on the Hunters platform under “Axon Reports” page. As always, feel free to reach out for any assistance and further questions. Team Axon.

  2. resolved Nov 16, 2023, 07:21 PM UTC

    This incident has been resolved.

Your product runs on more than Hunters Rapid Response

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →