FBI and CISA release joint advisory regarding Zeppelin ransomware

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint CSA to disseminate known Zeppelin ransomware IOCs and TTPs associated with ransomware variants identified through FBI investigations as recently June 21, 2022.

CISA Recommendations:

• The FBI and CISA encourage organizations to implement the recommendations in the Mitigations section of this CSA to reduce the likelihood and impact of ransomware incidents.

Please report any incidents related to this activity to the MS-ISAC SOC at soc@cisecurity.org or by calling 1-866-787-4722.