Russian ransomware group reportedly behind Olympus attack

Date:
Thu, 21 Oct 2021 13:38:25 +0000

Description:
Olympus has once again been the victim of a cybersecurity incident that is reported to be the work of notorious ransomware operatives.

FULL STORY ======================================================================

A supposed ongoing ransomware operation against camera giant Olympus is the work of the notorious Russia-based Evil Corp, according to reports.

Based on information from two anonymous sources with knowledge of the incident, TechCrunch says the attack was caused by the Macaw malware , a variant of the WastedLocker malware , both of which are created by Evil Corp.

The ongoing campaign, which began on October 10, and has encrypted Olympus systems in the US, Canada and Latin America, follows an earlier BlackMatter-orchestrated attack on the camera giant in September that encrypted its infrastructure across the European, Middle East and Africa regions. TechRadar needs you!

We're looking at how our readers use VPNs with streaming sites like Netflix
so we can improve our content and offer better advice. This survey won't take more than 60 seconds of your time, and we'd hugely appreciate if you'd share your experiences with us.

Click here to start the survey in a new window << These are the best endpoint protection tools Here's our choice of the best ransomware protection tools Weve put together a list of the best malware removal software

While Olympus has acknowledged that the October 10 incident has caused disruptions, it hasnt commented on the nature of the attack. Repeat victims

However, Olympus statement inadvertently hints to the fact that it has possibly been attacked by ransomware.

The nature and scope of the incident is under further investigation and we continue to learn additional details, including the likelihood of data exfiltration, read the statement.

Data exfiltration is part of the double-extortion strategy employed by most ransomware operatives, who, in addition to encrypting their victims files, also extract a copy of the sensitive ones, which they threaten to release to their competitors.

Allan Liska, a senior threat analyst at security firm Recorded Future, told TechCrunch that the Macaw malware leaves behind a ransom note on hacked computers that claims to have stolen data from its victims, lending credence to the claims of the anonymous sources.

Unlike Olympus, the Sinclair Broadcast Group, which owns or operates 185 television stations across more than 80 markets, did acknowledge last week that the Macaw malware led to severe disruptions. Protect your devices with these best antivirus software

Via TechCrunch



======================================================================
Link to news story: https://www.techradar.com/news/russian-ransomware-group-reportedly-behind-olym pus-attack/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)