Security News > 2020 > October > French IT outsourcer Sopra Steria hit by 'cyberattack', Ryuk ransomware suspected

French-headquartered IT outsourcer Sopra Steria has been struck by a "Cyberattack," reportedly linked to the Ryuk ransomware gang.

The business declined to say what had happened, though French media reports indicated that Sopra Steria's Active Directory infrastructure had been compromised, seemingly by hackers linked to the Ryuk malware crowd.

Infosec blogger Graham Cluley opined: "Naturally Sopra Steria's corporate clients, some of whom rely upon the firm to operate their core business processes and IT systems, will be concerned and will have plenty of questions regarding the nature of the attack."

Sopra Steria is a member of France's Cyber Campus, an industry-led initiative to spread cyber security awareness, training and product sales.

There is hope at hand for Sopra Steria if the malware is indeed RYUK. In late 2019 an infosec firm declared it had obtained a decryptor for the ransomware, meaning victims do not necessarily need to pay criminals to get their files back.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/10/22/sopra_steria_ryuk_ransomware_reports/