Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up
Summary: The operators of Maze Ransomware built a public website listing eight victim companies that declined to pay, posting each victim's infection date, stolen Office, text and PDF files, exfiltrated data volumes in gigabytes, and the IP addresses and machine names of infected servers. Days later, the gang behind the Sodinokibi/rEvil ransomware posted on a dark web forum that it also plans to use stolen files as public leverage, after Maze released 700MB of data on a hacking forum when Allied Universal did not pay.
Why it matters: Ransomware attacks are now data breaches, as BleepingComputer's Lawrence Abrams put it, and healthcare providers already required to report incidents to HHS may find a gang's public shaming site doing the disclosure for them.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·