Ransom Gangs Emailing Victim Customers for Leverage
Summary: Ransomware gangs including Clop and REvil are emailing victims' customers and partners directly, warning their data will be posted to dark web shaming sites unless the victim company pays. Clop sent such letters to RaceTrac Petroleum rewards members and people associated with the University of California, both tied to exploitation of a zero-day in Accellion File Transfer Appliance software that the company says compromised roughly a third of its customers on that appliance.
Bottom line: Clop and other gangs now demand two ransoms, so even a victim that refuses to pay for decryption keys still faces a separate decision about paying to keep customer data private - and research cited here suggests many who do pay may see the data published anyway.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·