Mlex Massive Ransomware Attack Targets Critical Infrastructure in March 2026
Article Content
- •Over 50 organizations in critical infrastructure sectors were affected by the ransomware attack.
- •The attack exploited the zero-day vulnerability CVE-2026-0456 in industrial control systems.
- •Ransom demands exceed $10 million, with significant disruptions reported in energy and healthcare sectors.
In March 2026, a sophisticated ransomware attack impacted multiple critical infrastructure sectors across the United States, affecting at least 50 organizations. The attack utilized the 'DarkSide' ransomware variant, which is known for its double extortion tactics. Initial reports indicate that the attackers exploited a zero-day vulnerability in widely used industrial control systems, identified as CVE-2026-0456. The breach has led to the encryption of sensitive data and demands for ransom payments totaling over $10 million. Key sectors affected include energy, transportation, and healthcare, causing significant disruptions. The FBI has launched an investigation and issued an emergency advisory to organizations in these sectors. As of now, many affected organizations are still working to restore their systems and recover data. Security experts recommend immediate patching of the identified vulnerability and enhancing monitoring protocols.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (1)
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…