Forwarded from BlackBox (Security) Archiv
Ransomware gang publishes tens of GBs of internal data from LG and Xerox
Maze gang publishes internal data from LG and Xerox after failed extortion attempt.
The operators of the Maze ransomware have published today tens of GB of internal data from the networks of enterprise business giants LG and Xerox following two failed extortion attempts.
The hackers leaked 50.2 GB they claim to have stolen from LG's internal network, and 25.8 GB of Xerox data.
While LG issued a generic statement to ZDNet in June, neither company wanted to talk about the incident in great depth today.
Both of today's leaks have been teased since late June when the operators of the Maze ransomware created entries for each of the two companies on their "leak portal."
The Maze gang is primarily known for its eponymous ransomware string and usually operates by breaching corporate networks, stealing sensitive files first, encrypting data second, and demanding a ransom to decrypt files.
If a victim refuses to pay the fee to decrypt their files and decides to restore from backups, the Maze gang creates an entry on a "leak website" and threatens to publish the victim's sensitive data in a second form ransom/extortion attempt.
The victim is then given a few weeks to think over its decision, and if victims don't give in during this second extortion attempt, the Maze gang will publish files on its portal.
LG and Xerox are at this last stage, after apparently refusing to meet the Maze gang's demands.
๐ ๐๐ผ https://www.zdnet.com/article/ransomware-gang-publishes-tens-of-gbs-of-internal-data-from-lg-and-xerox/
๐ ๐๐ผ ๐ฉ๐ช https://www.golem.de/news/datenleck-ransomwaregruppe-veroeffentlicht-daten-von-lg-und-xerox-2008-150044.html
#maze #ransomware #lg #xerox #extortion
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
Maze gang publishes internal data from LG and Xerox after failed extortion attempt.
The operators of the Maze ransomware have published today tens of GB of internal data from the networks of enterprise business giants LG and Xerox following two failed extortion attempts.
The hackers leaked 50.2 GB they claim to have stolen from LG's internal network, and 25.8 GB of Xerox data.
While LG issued a generic statement to ZDNet in June, neither company wanted to talk about the incident in great depth today.
Both of today's leaks have been teased since late June when the operators of the Maze ransomware created entries for each of the two companies on their "leak portal."
The Maze gang is primarily known for its eponymous ransomware string and usually operates by breaching corporate networks, stealing sensitive files first, encrypting data second, and demanding a ransom to decrypt files.
If a victim refuses to pay the fee to decrypt their files and decides to restore from backups, the Maze gang creates an entry on a "leak website" and threatens to publish the victim's sensitive data in a second form ransom/extortion attempt.
The victim is then given a few weeks to think over its decision, and if victims don't give in during this second extortion attempt, the Maze gang will publish files on its portal.
LG and Xerox are at this last stage, after apparently refusing to meet the Maze gang's demands.
๐ ๐๐ผ https://www.zdnet.com/article/ransomware-gang-publishes-tens-of-gbs-of-internal-data-from-lg-and-xerox/
๐ ๐๐ผ ๐ฉ๐ช https://www.golem.de/news/datenleck-ransomwaregruppe-veroeffentlicht-daten-von-lg-und-xerox-2008-150044.html
#maze #ransomware #lg #xerox #extortion
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
ZDNET
Ransomware gang publishes tens of GBs of internal data from LG and Xerox
Maze gang publishes internal data from LG and Xerox after failed extortion attempt.
University of Utah pays $457,000 to ransomware gang
University officials restored from backups, but they had to pay the ransomware gang to prevent them from leaking student data.
The University of Utah revealed today that it paid a ransomware gang $457,059 in order to avoid having hackers leak student information online.
The incident is the latest in a long string of ransomware attacks where criminal groups steal sensitive files from the hacked companies before encrypting their files; and in case victims refuse to pay, threaten to release the stolen documents as a second extortion scheme.
https://www.zdnet.com/article/university-of-utah-pays-457000-to-ransomware-gang/
#US #Utah #University #ransomware
University officials restored from backups, but they had to pay the ransomware gang to prevent them from leaking student data.
The University of Utah revealed today that it paid a ransomware gang $457,059 in order to avoid having hackers leak student information online.
The incident is the latest in a long string of ransomware attacks where criminal groups steal sensitive files from the hacked companies before encrypting their files; and in case victims refuse to pay, threaten to release the stolen documents as a second extortion scheme.
https://www.zdnet.com/article/university-of-utah-pays-457000-to-ransomware-gang/
#US #Utah #University #ransomware
Ransomware attack halts Argentinian border crossing for four hours
Argentina's official immigration agency, Direcciรณn Nacional de Migraciones, suffered a Netwalker ransomware attack that temporarily halted border crossing into and out of the country.
While ransomware attacks against cities and local agencies have become all too common, this may be a first known attack against a federal agency that has interrupted a country's operations.
According to a criminal complaint published by Argentina's cybercrime agency, Unidad Fiscal Especializada en Ciberdelincuencia, the government first learned of the ransomware attack after receiving numerous tech support calls from checkpoints at approximately 7 AM on August 27th.
https://www.bleepingcomputer.com/news/security/ransomware-attack-halts-argentinian-border-crossing-for-four-hours/
#South #America #Argentina #ransomware #attack
Argentina's official immigration agency, Direcciรณn Nacional de Migraciones, suffered a Netwalker ransomware attack that temporarily halted border crossing into and out of the country.
While ransomware attacks against cities and local agencies have become all too common, this may be a first known attack against a federal agency that has interrupted a country's operations.
According to a criminal complaint published by Argentina's cybercrime agency, Unidad Fiscal Especializada en Ciberdelincuencia, the government first learned of the ransomware attack after receiving numerous tech support calls from checkpoints at approximately 7 AM on August 27th.
https://www.bleepingcomputer.com/news/security/ransomware-attack-halts-argentinian-border-crossing-for-four-hours/
#South #America #Argentina #ransomware #attack
Forwarded from BlackBox (Security) Archiv
Cyber security alert issued following rising attacks on UK academia
The NCSC has issued an alert to the academic sector following a spate of online attacks against UK schools, colleges and universities.
The National Cyber Security Centre, a part of GCHQ, is supporting establishments to keep criminals out of their networks after a spike in ransomware attacks.
The rise in attacks was recorded in August as cyber criminals turn their attention to a sector focused on the return of students.
Cyber security experts have today (Thursday) stepped up support for UK schools, colleges, and universities following a spate of online attacks with the potential to de-rail their preparations for the new term.
The National Cyber Security Centre (NCSC) issued an alert to the sector containing a number of steps they can take to keep cyber criminals out of their networks, following a recent spike in ransomware attacks.
The NCSC dealt with several ransomware attacks against education establishments in August, which caused varying levels of disruption, depending on the level of security establishments had in place.
Ransomware attacks typically involve the encryption of an organisationโs data by cyber criminals, who then demand money in exchange for its recovery.
With institutions either welcoming pupils and students back for a new term, or preparing to do so, the NCSCโs alert urges them to take immediate steps such as ensuring data is backed up and also stored on copies offline.
They are also urged to read the NCSCโs newly-updated guidance on mitigating malware and ransomware attacks, and to develop an incident response plan which they regularly test.
๐ ๐๐ผ https://www.ncsc.gov.uk/news/alert-issued-following-rising-attacks-on-uk-academia
#alert #NCSC #cyber #security #uk #academia #ransomware
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
The NCSC has issued an alert to the academic sector following a spate of online attacks against UK schools, colleges and universities.
The National Cyber Security Centre, a part of GCHQ, is supporting establishments to keep criminals out of their networks after a spike in ransomware attacks.
The rise in attacks was recorded in August as cyber criminals turn their attention to a sector focused on the return of students.
Cyber security experts have today (Thursday) stepped up support for UK schools, colleges, and universities following a spate of online attacks with the potential to de-rail their preparations for the new term.
The National Cyber Security Centre (NCSC) issued an alert to the sector containing a number of steps they can take to keep cyber criminals out of their networks, following a recent spike in ransomware attacks.
The NCSC dealt with several ransomware attacks against education establishments in August, which caused varying levels of disruption, depending on the level of security establishments had in place.
Ransomware attacks typically involve the encryption of an organisationโs data by cyber criminals, who then demand money in exchange for its recovery.
With institutions either welcoming pupils and students back for a new term, or preparing to do so, the NCSCโs alert urges them to take immediate steps such as ensuring data is backed up and also stored on copies offline.
They are also urged to read the NCSCโs newly-updated guidance on mitigating malware and ransomware attacks, and to develop an incident response plan which they regularly test.
๐ ๐๐ผ https://www.ncsc.gov.uk/news/alert-issued-following-rising-attacks-on-uk-academia
#alert #NCSC #cyber #security #uk #academia #ransomware
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
www.ncsc.gov.uk
Cyber security alert issued following rising attacks on UK academia
The NCSC has issued an alert to the academic sector following a spate of online attacks against UK schools, colleges and universities.
Forwarded from BlackBox (Security) Archiv
This media is not supported in your browser
VIEW IN TELEGRAM
When coffee makers are demanding a ransom, you know IoT is screwed
With the name Smarter, you might expect a network-connected kitchen appliance maker to be, well, smarter than companies selling conventional appliances. But in the case of the Smarterโs Internet-of-things coffee maker, youโd be wrong.
๐ ๐๐ผ https://arstechnica.com/information-technology/2020/09/how-a-hacker-turned-a-250-coffee-maker-into-ransom-machine/
#coffee #ransomware #iot #hacker #video
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
With the name Smarter, you might expect a network-connected kitchen appliance maker to be, well, smarter than companies selling conventional appliances. But in the case of the Smarterโs Internet-of-things coffee maker, youโd be wrong.
๐ ๐๐ผ https://arstechnica.com/information-technology/2020/09/how-a-hacker-turned-a-250-coffee-maker-into-ransom-machine/
#coffee #ransomware #iot #hacker #video
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
Ransomware Hits Healthcare Provider UHS, Shuts Down Hospital IT Systems
Although Universal Health Services largely runs behavioral healthcare facilities, it also operates some emergency care centers, potentially putting patients' lives at risk.
A ransomware attack appears to have taken down all IT systems at Universal Health Services (UHS), which operates 400 hospitals and behavioral health facilities in the US and the UK.
UHS employees began reporting problems on Monday via Reddit; the attack has been shutting down computers at various hospitals, forcing them to turn away patients, they say.
One UHS employee based in Arizona told PCMag that the disruption has been blamed on ransomware infecting hospital systems. โEverything is down. No access to any computer at all," the employee said. The hospital has only recently managed to restore the phone system.
โI believe we are turning patients away,โ the employee added. โWe have been doing everything on paper charts. What gets me is we had no downtime protocols in place. Itโs all been improv.โ
BleepingComputer reports that a notorious ransomware strain known as Ryuk appears to be behind the attack, which has encrypted computers across the UHS network, making them impossible to access.
https://www.pcmag.com/news/ransomware-hits-healthcare-provider-uhs-shuts-down-hospital-it-systems
#US #ransomware #attack #hospital
Although Universal Health Services largely runs behavioral healthcare facilities, it also operates some emergency care centers, potentially putting patients' lives at risk.
A ransomware attack appears to have taken down all IT systems at Universal Health Services (UHS), which operates 400 hospitals and behavioral health facilities in the US and the UK.
UHS employees began reporting problems on Monday via Reddit; the attack has been shutting down computers at various hospitals, forcing them to turn away patients, they say.
One UHS employee based in Arizona told PCMag that the disruption has been blamed on ransomware infecting hospital systems. โEverything is down. No access to any computer at all," the employee said. The hospital has only recently managed to restore the phone system.
โI believe we are turning patients away,โ the employee added. โWe have been doing everything on paper charts. What gets me is we had no downtime protocols in place. Itโs all been improv.โ
BleepingComputer reports that a notorious ransomware strain known as Ryuk appears to be behind the attack, which has encrypted computers across the UHS network, making them impossible to access.
https://www.pcmag.com/news/ransomware-hits-healthcare-provider-uhs-shuts-down-hospital-it-systems
#US #ransomware #attack #hospital
PCMAG
Ransomware Hits Healthcare Provider UHS, Shuts Down Hospital IT Systems
Although Universal Health Services largely runs behavioral healthcare facilities, it also operates some emergency care centers, potentially putting patients' lives at risk.
Forwarded from BlackBox (Security) Archiv
This media is not supported in your browser
VIEW IN TELEGRAM
Ransomware hack cripples United Health Services hospitals, facilities across the US
The cyberattack, which began early Sunday, is thought to have employed the Ryuk ransomware, TechCrunch reported. Computer screens changed with text that referenced the โshadow universe,โ which is consistent with the Ryuk ransomware, a person familiar with the situation told TechCrunch. โEveryone was told to turn off all the computers and not to turn them on again,โ the person told the tech site. โWe were told it will be days before the computers are up again.โ
๐ ๐๐ผ https://www.usatoday.com/story/tech/2020/09/28/health-care-provider-united-health-services-hit-cyberattack/3565533001/
๐ ๐๐ผ https://techcrunch.com/2020/09/28/universal-health-services-ransomware/
#usa #ransomware #cyberattack
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
The cyberattack, which began early Sunday, is thought to have employed the Ryuk ransomware, TechCrunch reported. Computer screens changed with text that referenced the โshadow universe,โ which is consistent with the Ryuk ransomware, a person familiar with the situation told TechCrunch. โEveryone was told to turn off all the computers and not to turn them on again,โ the person told the tech site. โWe were told it will be days before the computers are up again.โ
๐ ๐๐ผ https://www.usatoday.com/story/tech/2020/09/28/health-care-provider-united-health-services-hit-cyberattack/3565533001/
๐ ๐๐ผ https://techcrunch.com/2020/09/28/universal-health-services-ransomware/
#usa #ransomware #cyberattack
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@BlackBox_Archiv
๐ก@NoGoolag
Forwarded from BlackBox (Security) Archiv
Computer giant Acer hit by $50 million ransomware attack
Computer giant Acer has been hit by a REvil ransomware attack where the threat actors are demanding the largest known ransom to date, $50,000,000.
Acer is a Taiwanese electronics and computer maker well-known for laptops, desktops, and monitors. Acer employs approximately 7,000 employees and earned $7.8 billion in 2019.
Yesterday, the ransomware gang announced on their data leak site that they had breached Acer and shared some images of allegedly stolen files as proof.
https://www.bleepingcomputer.com/news/security/computer-giant-acer-hit-by-50-million-ransomware-attack
#acer #ransomware #attack
๐ก@cRyPtHoN_INFOSEC_FR
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@BlackBox_Archiv
๐ก@NoGoolag
Computer giant Acer has been hit by a REvil ransomware attack where the threat actors are demanding the largest known ransom to date, $50,000,000.
Acer is a Taiwanese electronics and computer maker well-known for laptops, desktops, and monitors. Acer employs approximately 7,000 employees and earned $7.8 billion in 2019.
Yesterday, the ransomware gang announced on their data leak site that they had breached Acer and shared some images of allegedly stolen files as proof.
https://www.bleepingcomputer.com/news/security/computer-giant-acer-hit-by-50-million-ransomware-attack
#acer #ransomware #attack
๐ก@cRyPtHoN_INFOSEC_FR
๐ก@cRyPtHoN_INFOSEC_EN
๐ก@cRyPtHoN_INFOSEC_DE
๐ก@BlackBox_Archiv
๐ก@NoGoolag
BleepingComputer
Computer giant Acer hit by $50 million ransomware attack
Computer giant Acer has been hit by a REvil ransomware attack where the threat actors are demanding the largest known ransom to date, $50,000,000.
Forwarded from Pegasus NSO & other spyware
Ransomlook@social.circl.lu -
New post from Medusa : Postel Spa
More at :
https://www.ransomlook.io/group/Medusa #Ransomware #MedusaRansomware Hackers Steal Millions From Vegas Casinos | Mental Outlaw
In this video I discuss how MGM and Cesar's Entertainment Resort/Casinos were hacked by a ransomware group and had sensitive customer data and company data exfiltrated from their servers. So far Cesar's Entertainment has paid half of the 30 million dollar to keep files from being released by MGM has paid nothing and the hackers are threatening to ruin MGM's reputation with a data leak
#Hacking #Casino #LasVegas
#Ransomware
In this video I discuss how MGM and Cesar's Entertainment Resort/Casinos were hacked by a ransomware group and had sensitive customer data and company data exfiltrated from their servers. So far Cesar's Entertainment has paid half of the 30 million dollar to keep files from being released by MGM has paid nothing and the hackers are threatening to ruin MGM's reputation with a data leak
#Hacking #Casino #LasVegas
#Ransomware