Security News > 2021 > March > Insurance giant CNA hit by new Phoenix CryptoLocker ransomware

Insurance giant CNA hit by new Phoenix CryptoLocker ransomware
2021-03-25 18:26

Insurance giant CNA has suffered a ransomware attack using a new variant called Phoenix CryptoLocker that is possibly linked to the Evil Corp hacking group.

"On March 21, 2021, CNA determined that it sustained a sophisticated cybersecurity attack. The attack caused a network disruption and impacted certain CNA systems, including corporate email," CNA disclosed in a statement.

Since our first reporting, BleepingComputer has confirmed that CNA suffered an attack by a new ransomware known as 'Phoenix CryptoLocker.

Possible links to Evil Corp. A source has told BleepingComputer that Phoenix Locker is believed to be a new ransomware family released by Evil Corp based on similarities in the code.

The new Hades ransomware family has been seen in multiple attacks since then, including a ransomware attack on trucking giant Forward Air.

The new Phoenix Locker ransomware used in the CNA attack is believed to be another Evil Corp spinoff.


News URL

https://www.bleepingcomputer.com/news/security/insurance-giant-cna-hit-by-new-phoenix-cryptolocker-ransomware/