Security Operations
Threat Intelligence
❓
Campaigns & groups reported
Healthcare ransomware waveLockBit operations
Campaign: Healthcare ransomware wave
Akira

CERT NZ reports increased ransomware activity against New Zealand health organisations; encourages offline backups and multi-factor authentication.

CountriesNZ
Sectorshealthcare
MITRET1486T1567
🛡️ Verify offline backups, enable MFA, and segment clinical systems.
NZ NCSC / CERT NZ — Advisories · 2026-08-16 · source ↗
Campaign: LockBit operations
LockBit

Europol warns of continued LockBit 3.0 affiliate activity against manufacturing and logistics across the EU.

CountriesEUUKDEFR
Sectorsmanufacturingtransportretail
MITRET1486
🛡️ Harden internet-facing services and maintain tested offline backups.
Europol / EC3 · 2026-08-15 · source ↗
Ransomware readiness
  1. Maintain tested, offline backups with a documented restore procedure.
  2. Enable multi-factor authentication everywhere, especially for privileged accounts.
  3. Patch internet-facing systems - most ransomware follows exploited vulnerabilities.
  4. Segment networks so a compromised workstation cannot reach critical systems.
  5. Report incidents to CERT NZ / ACSC / CISA as applicable in your region.