Скачать или смотреть Weekly Ransomware Roundup: Okta data breach, Quantum ransomware attack LastPass source code stolen

Hackers Hit over 130 Organizations in Another Okta Phishing Supply Chain Attack
Hackers responsible for a string of recent cyberattacks, including those on Twilio, MailChimp, and Klaviyo, compromised over 130 organizations in the same phishing campaign. The campaign used a phishing kit codenamed '0ktapus' and stole 9,931 login credentials that were used to gain access to corporate networks and systems through VPNs and other remote access devices. Identity credentials and 2FA codes were also stolen from Okta, which is an identity-as-a-service (IDaaS) platform, and were used to carry out subsequent supply chain attacks on customers using these services, like Signal and DigitalOcean.

Quantum Ransomware Hits IAD Government Agency in Dominican Republic

The Instituto Agrario Dominicano (IAD) has suffered a Quantum ransomware attack that encrypted multiple services and servers throughout the government agency. Four physical and eight virtual servers were affected and most of the information, including databases, email and applications, was compromised. The IAD has told local media that they only had basic security software on their systems, such as antivirus, and lack a dedicated security department. The attackers have asked for more than six hundred thousand dollars in ransom and have threatened to leak sensitive data.

RansomEXX Claims Ransomware Attack on Bombardier Recreational Products (BRP)

RansomEXX group, notorious for attacking high-profile companies like GIGABYTE, has claimed yet another victim “Bombardier Recreational Products”. After the attack, BRP informed the public of a temporary halt of all operations that impacted production and caused delays in transactions with customers and suppliers. The company confirmed that the hackers breached its systems via a supply chain attack. Shortly after, the RansomEXX gang listed BRP on its leak site along with 29.9GB of files allegedly stolen from the firm. They also provided samples that included non-disclosure agreements, passports and IDs, material supply agreements, and contract renewals.

LastPass Source Code Stolen in Data Breach

Password management software firm “LastPass”, having more than 30 million users and 85,000 business customers worldwide, has suffered a data breach that led to the theft of source code and technical information. The unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account and took portions of the source code and some proprietary LastPass technical data. However, LastPass stores sensitive data like passwords in 'encrypted vaults' that can only be decrypted using a customer's master password, which LastPass says was not compromised in this cyberattack.

Veeam-Ready Backup and DR Appliance with Onsite and Cloud-Based Immutable Storage

Immutable storage follows the Write-Once Read-Many (WORM) framework to prevent changes and modifications to critical data for a user-defined retention period. This protects mission-critical backups, file/S3 object data from ransomware since this data cannot be maliciously encrypted. Learn how you can use a Veeam-ready backup and disaster recovery (DR) appliance to set up policy-based and automated onsite and cloud-based immutable storage.

French Hospital Hit by Ransomware Attack – Hackers Demanding $10M in Ransom

The Center Hospitalier Sud Francilien (CHSF), a hospital in Paris, has suffered a ransomware attack over the weekend. The attack disrupted the emergency services and surgeries and forced the hospital to refer patients to other healthcare service providers. The security breach forced hospital staff to return to paper and pen as it affected the hospital’s software, the storage systems (in particular medical PACS imaging) and the information systems relating to patient admissions. Threat actors demand a $10 million ransom for the decryption key. Sources confirmed that the attack was launched by an affiliate of LockBit 3.0 RaaS.

#Okta #LastPass #Quantum