Ransomware attack on Spanish Companies
Ransomware Attacks Hit Several Spanish Companies
Everis, one of the largest IT consulting companies in Spain, suffered a targeted ransomware attack on Monday, forcing the company to shut down all its computer systems until the issue gets resolved completely.
The ransomware attack has taken down the networks of at least two companies in Spain. The targets included Everis—a major IT services and consulting subsidiary of Japan-based global communications company NTT—and the radio company Sociedad Española de Radiodifusión (Cadena SER).
What's more? It seems like Everis is not the only company that suffered a ransomware attack this morning. Some other Spanish and European companies have reportedly also been hit by a similar ransomware malware during the same period. At this moment, it's unknown which specific ransomware family was used to targeting the company, but the attackers behind the attack reportedly demanded USD 835,000 in ransom for the decryptor, a company insider informed bitcoin.es site.
Here's the ransomware message that was displayed on the screens of the infected computers across the company:
Hi Everis, your network was hacked and encrypted.
No free decryption software is available on the web.
Email us at sydney.wiley@protonmail.com or evangelina.mathews@tutanota.com to get the ransom amount.
Keep our contacts safe.
Disclosure can lead to the impossibility of decryption.
However, considering the highly targeted nature of the attack, the founder of VirusTotal in a tweet suggests the type of ransomware could be BitPaymer/IEncrypt, the same malware that was recently found exploiting a zero-day vulnerability in Apple's iTunes and iCloud software.
The Spanish Department of Homeland Security has issued a warning about the ongoing cyber attack and recommended users to follow basic security practices like keeping their systems updated and having a proper backup of their important data.
Everis, one of the largest IT consulting companies in Spain, suffered a targeted ransomware attack on Monday, forcing the company to shut down all its computer systems until the issue gets resolved completely.
The ransomware attack has taken down the networks of at least two companies in Spain. The targets included Everis—a major IT services and consulting subsidiary of Japan-based global communications company NTT—and the radio company Sociedad Española de Radiodifusión (Cadena SER).
What's more? It seems like Everis is not the only company that suffered a ransomware attack this morning. Some other Spanish and European companies have reportedly also been hit by a similar ransomware malware during the same period. At this moment, it's unknown which specific ransomware family was used to targeting the company, but the attackers behind the attack reportedly demanded USD 835,000 in ransom for the decryptor, a company insider informed bitcoin.es site.
Here's the ransomware message that was displayed on the screens of the infected computers across the company:
Hi Everis, your network was hacked and encrypted.
No free decryption software is available on the web.
Email us at sydney.wiley@protonmail.com or evangelina.mathews@tutanota.com to get the ransom amount.
Keep our contacts safe.
Disclosure can lead to the impossibility of decryption.
However, considering the highly targeted nature of the attack, the founder of VirusTotal in a tweet suggests the type of ransomware could be BitPaymer/IEncrypt, the same malware that was recently found exploiting a zero-day vulnerability in Apple's iTunes and iCloud software.
The Spanish Department of Homeland Security has issued a warning about the ongoing cyber attack and recommended users to follow basic security practices like keeping their systems updated and having a proper backup of their important data.
Comments
Post a Comment