Ransomware at IT Services Provider Synoptek
Summary: Synoptek, an Irvine, California managed service provider serving more than 1,100 customers across government, financial services, healthcare and other sectors, suffered a Sodinokibi ransomware attack on Dec. 23 that disrupted client operations, and two company sources say it paid an unverified sum for decryption keys. A customer briefed on the incident said intruders used a remote management tool to install the ransomware on client systems, and both the State of California and the U.S. Department of Homeland Security have been contacting potentially affected state and local entities.
Key Takeaway: The same Sodinokibi strain hit Wisconsin-based PerCSoft in August, causing outages for more than 400 clients, and Colorado-based Complete Technology Solutions this month, reaching computers at more than 100 dental practices - a pattern of targeting IT providers whose customers' public pressure to restore service pushes them toward paying.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·