|
From June 2021 through at least November 2022, threat actors have used Hive ransomware, which follows the Ransomware-as-a-Service (RaaS) model, to target a wide range of businesses and critical infrastructure sectors including the water and wastewater industry.
The EPA recommends that all drinking water and wastewater utilities take the following mitigation actions:
- Prioritize remediating known exploited vulnerabilities.
- Enable and enforce multi factor authentication with strong passwords.
- Close unused ports and remove any application not deemed necessary for day-to-day operations.
- Follow the steps outlined in the joint Cybersecurity Advisory to protect your organization from a potential Hive ransomware attack.
Where to report suspected or actual ransomware attacks:
Thank you for all that you do to protect the public health and environment of your communities!
|
