Avaddon Ransomware

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has seen a number of organisations that have been impacted by ransomware activity from the Avaddon group within Australia. This targeting has occurred across multiple industry sectors. In addition to encryption of data, victims are threatened with the publication of stolen data, as well as Distributed Denial of Service against their network.

The ASD’s ACSC has provided analysis of the malware including detection methods, indicators of compromise and mitigations.

Assistance

The ASD’s ACSC is monitoring the situation and is able to provide assistance and advice as required. Organisations that have been impacted or require assistance can contact the ASD’s ACSC via 1300 CYBER1.