Security News > 2023 > June > BBC, British Airways, Boots hit with hackers’ ultimatum after suffering MOVEit supply-chain attack

British Airways, BBC and Boots have all been served an ultimatum after they were hit with a supply-chain attack by the ransomware group Clop.
In February 2023, Clop claimed responsibility for a supply-chain attack that affected more than 130 organizations, including data belonging to CHS Healthcare patients.
In a recent software supply-chain attacks report, Statista noted the global incidence of software packages impacted by supply-chain attacks had a significant surge between 2019 and 2022, escalating from 702 to 185,572.
Given the growing rate of supply-chain attacks, organizations are advised to adopt best practices to help them stay safe.
Once attackers interact with these decoy resources, an alert is triggered, notifying the targeted organization of the attempted breach.
An organization's attack surface encompasses vulnerabilities, pathways and methods that hackers can exploit to gain unauthorized network access, compromise sensitive data or execute cyberattacks.
News URL
https://www.techrepublic.com/article/cyber-gang-issues-ultimatum-to-bbc-british-airways-boots/
Related news
- Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks (source)
- Chinese FamousSparrow hackers deploy upgraded malware in attacks (source)
- North Korean hackers adopt ClickFix attacks to target crypto firms (source)
- Recent GitHub supply chain attack traced to leaked SpotBugs token (source)
- SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack (source)
- That massive GitHub supply chain attack? It all started with a stolen SpotBugs token (source)
- Russian hackers attack Western military mission using malicious drive (source)
- Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery (source)
- Hackers abuse Zoom remote control feature for crypto-theft attacks (source)
- Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack (source)