Security News > 2021 > March > Insurance Giant CNA Hit with Novel Ransomware Attack
A novel ransomware attack forced insurance giant CNA to take systems offline and temporarily shutter its website.
"The attack caused a network disruption and impacted certain CNA systems, including corporate email," according to the statement.
Though the company did not elaborate on the nature of the attack, a report in BleepingComputer said CNA was the victim of a new ransomware called Phoenix CryptoLocker.
Cryptolockers are an oft-used type of ransomware that immediately encrypt files on the machines they attack and demand a ransom from the victims in exchange for the key to unlocking them.
The impact of the group's latest attack was so serious that CNA disconnected its systems from its network "Out of an abundance of caution" and is currently providing workarounds for employees where possible so the company can continue operating to serve its customers, the company said.
Sources familiar with the attack have told BleepingComputer that threat actors encrypted more than 15,000 devices on CNA's network-including those of employees working remotely who were logged onto the company's VPN at the time-when they deployed the new ransomware on Sunday, according to the report.
News URL
https://threatpost.com/cna-hit-novel-ransomware/165044/
Related news
- JPCERT shares Windows Event Log tips to detect ransomware attacks (source)
- Ransomware attack forces UMC Health System to divert some patients (source)
- Underground ransomware claims attack on Casio, leaks stolen data (source)
- Casio confirms customer data stolen in a ransomware attack (source)
- Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between (source)
- BianLian ransomware claims attack on Boston Children's Health Physicians (source)
- Microsoft: Ransomware Attacks Growing More Dangerous, Complex (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks (source)
- Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks (source)