Splunk Threat Research Team reports: As ransomware campaigns continue, malicious actors introduce different modus operandi to target their victims. In this blog, we’ll be taking a look at the Clop ransomware. This crimeware was discovered in 2019 and is said to be used for an attack that demanded one of the highest ransom amounts in recorded history…
Category: Business Sector
Houston Rockets Hit by “Babuk” Ransomware
Bill Toulas reports: The ransomware group known as “Babuk” has added Houston Rockets to its victim list, warning about the imminent leak of 500GB of stolen data if their payment demands aren’t met. The threat actors present screenshots of the exfiltrated files as proof of possession, showing what appears to be contracts, non-disclosure agreements, customer…
Brokerage firm agrees to $3 mln deal for New York cybersecurity rule violations
Sara Merken reports: Brokerage firm National Securities Corp has agreed to pay $3 million in a settlement with New York’s financial services regulator over shortfalls that resulted in four cybersecurity breaches involving unauthorized access to email accounts. Read more on Reuters. NY DFS’s press release: Superintendent of Financial Services Linda A. Lacewell announced today that…
CH: Griesser AG victim of ransomware attack
A Swiss firm that manufactures sun protection window treatments such as blinds, shutters, and awnings has fallen prey to a ransomware attack. Stefan Borkert reports that Griesser AG is currently only reachable by phone and email. (translation): One or more unknown perpetrators attacked the servers of Aadorfer Griesser AG in Switzerland with ransomware, a so-called…
Software developer charged with damaging the computer system of a Cleveland company
Acting U.S. Attorney Bridget M. Brennan announced that a federal grand jury sitting in Cleveland has returned an indictment charging Davis Lu, 51, of Houston, Texas, with one count of damaging protected computers. The Defendant is accused of using his position as a software developer to execute malicious code on his employer’s computer servers. The…
Court Dismisses Data Privacy Litigation Alleging Defendant Failed to Maintain Reasonable Security Procedures in Wake of Data Breach
Kristin L. Bryan and Katie Sharpless of Squire Patton Boggs write: CPW has been covering data breach litigations, including instances in which meritless claims are kicked by courts at the pleading stage. A recent decision from an Ohio district court is yet another example of this trend. Newman v. Total Quality Logistics, 2021 U.S. Dist. LEXIS…