Russian cyber gang issues ultimatum to victims of several UK firms – media reports
The Clop group posted a notice on the Dark Web warning firms affected by the MOVEit hack to email them before June 14 or stolen data will be published.
More than 100,000 staff at the BBC, British Airways and Boots have been told payroll data may have been taken.
Employers are being urged not to pay up if the hackers demand a ransom, the BBC reported.
Experts believe this is an unusual tactic as normally ransom demands are emailed to victim organizations by the hackers, but here they are demanding that victims get in touch.
This could be because Clop itself can’t keep up with the scale of the hack which is still being processed around the world.
“My take is that they just have so much data that it is difficult for them to get on top of it all,” says SOS Intelligence CEO Amir Hadžipasić.
Read also: Russian hackers attack Italian government websites
“They’re betting that if you know then you will contact them.”
MOVEit is supplied by Progress Software in the United States for many businesses to securely move files around company systems. Payroll services provider Zellis, which is based in the United Kingdom, was one of its users.
Zellis has confirmed that eight UK organizations have had data stolen as a result, including home addresses, national insurance numbers and, in some cases, bank details. Not all firms have had the same data exposed.
Zellis customers which has been breached include the BBC, British Airways, Aer Lingus, and Boots.
Ukrainian cyber police, together with law enforcement officers of the Republic of Korea and the United States, on June 16, 2021, exposed a hacker group that distributed the Clop encryption virus and caused losses to foreign companies totaling about half a billion U.S. dollars.
We’re bringing the voice of Ukraine to the world. Support us with a one-time donation, or become a Patron!
Read the original article on The New Voice of Ukraine
