Ghost ransomware actors are out of control!

SCWorld.com reported that “The federal government has warned security teams to patch exploited vulnerabilities and segment networks in the wake of Ghost ransomware threat actors compromising organizations in more than 70 countries. A joint advisory Feb. 19 by the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) said that beginning in early 2021, the Ghost actors began attacking victims whose internet-facing services ran outdated versions of software and firmware.”  The February 20, 2025 report entitled “Ghost ransomware actors compromised victims in more than 70 countries” (https://tinyurl.com/mpfyrzbe) included these comments:

 Based in China, the Ghost actors conducted these widespread attacks mainly for financial gain, said the FBI and CISA. Targeted victims include critical infrastructure, schools and universities, healthcare, government networks, religious institutions, technology and manufacturing companies, and numerous small businesses.

According to the FBI and CISA, the Ghost actors leveraged vulnerabilities in Fortinet FortiOS appliances; servers running Adobe ColdFusion and; Microsoft SharePoint, and Microsoft Exchange.

Are you surprised?