Security News

Paying a ransom to prevent leaking of stolen data is a risky gamble
2020-11-05 13:15

They also warned that cases where the attackers exfiltrated data and asked for an additional ransom to delete it have doubled in the same period, but that paying up is a definite gamble. Various ransomware groups have posted the stolen data online despite having been paid to not release it or have demanded another payment at a later date.

Ransom campaign threatens organizations with DDoS attacks
2020-10-15 13:52

In a new campaign analyzed by Radware, cybercriminals threaten organizations with Distributed Denial of Service attacks unless they acquiesce to their ransom demands. Published on Wednesday, a security alert entitled "2020 Ransom DDoS Campaign Update" describes how Radware and the FBI have been warning organizations about a global ransom DDoS campaign targeting financial companies and other businesses around the world.

The Week in Ransomware - October 9th 2020 - Giant ransoms
2020-10-09 18:22

Ransomware continues to run rampant this week, with well-known organizations getting hit with massive ransomware attacks. The biggest news this week is the Clop ransomware attack against Software AG, where the attackers are demanding a $23 million ransom.

Software AG IT giant hit with $23 million ransom by Clop ransomware
2020-10-09 15:15

The Clop ransomware gang hit the network of German enterprise software giant Software AG last Saturday, asking for a ransom of $23 million after stealing employee information and company documents. Software AG is a software company headquartered in Darmstadt, Germany, with more than 5,000 employees and operations in over 70 countries around the globe.

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work
2020-10-08 19:42

There's an old adage in information security: "Every company gets penetration tested, whether or not they pay someone for the pleasure." Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in. These folks are very often contractors who work with established ransomware groups, and who are paid a set percentage of any eventual ransom payments made by a victim company.

Northern Virginia School System Hacked, Data Held for Ransom
2020-09-14 12:23

Virginia's largest school system has been hacked and the attackers are seeking a ransom payment to keep them from disclosing stolen personal information. The school system confirmed the hack and said it is investigating and working with law enforcement.

Don't pay the ransom, mate. Don't even fix a price, say Australia's cyber security bods
2020-09-12 08:33

Most online attacks could be easily avoided by following basic cyber security advice, Australia's national cyber security bureau has said - even as it warned that the impact and severity of things like ransomware attacks are getting worse and worse. "Cybercriminals follow the money," said the Australian Cyber Security Centre in its annual report for 2019-20, published earlier this week.

Colorado City Pays $45,000 Ransom After Cyber-Attack
2020-08-05 15:30

Lafayette, Colorado, officials announced Tuesday the city's computer systems were hacked and they were forced to pay a ransom to regain access. Lafayette officials said hackers disabled the city's network services and blocked its access until the city paid a $45,000 fee, the Daily Camera reported.

CWT Travel Agency Faces $4.5M Ransom in Cyberattack, Report
2020-07-31 16:08

CWT, a giant in the corporate travel agency world with a global clientele, may have faced payment of $4.5 million to unknown hackers in the wake of a ransomware attack. A CWT spokesperson declined to comment on whether the ransom was paid, or any technical details of the attack, or how it was able to recover so quickly.

First rule of Ransomware Club is do not pay the ransom, but it looks like Carlson Wagonlit Travel didn't get the memo
2020-07-31 12:50

US corporate travel management firm Carlson Wagonlit Travel has suffered an intrusion and it is believed the company paid a $4.5m ransom to get its data back. The ransomware, a relatively new strain first seen late last year, deploys a Windows XP virtual machine onto the target network in order to unleash the ransomware itself.