Taiwanese motherboard manufacturer Gigabyte has fallen victim to a ransomware attack. as such “computer is sleeping” It reported that the attackers stole about 112 gigabytes of data and are threatening to release it. The attack is said to have taken place on the night of 2 to 3 August. Then Gigabyte shut down its systems in Taiwan. Several of the company’s websites, including the support page, were also affected. However, Gigabyte confirmed the attack on a Chinese news site.
Intel and AMD data affected
According to “Bleepingcomputer”, the ransomware group RansomExx is behind the attack. It is said if group members attack a system, they will leave extortion messages (ransom notes) on every encrypted system. The link in it takes the victim to a special website. This is where criminals formulate their demands. In the case of gigabytes, there is talk of 112GB (120971743.713 bytes) of stolen data. Many of them may relate to documentation from manufacturers Intel, AMD, or American Megatrends. annoying “WFFCTech” NVIDIA data could also be affected, although the name of the company was not mentioned. As evidence, the criminals showed screenshots of stolen documents on the site, as reported by “Bleepingcomputer”. Gigabyte has not commented on this yet.
RansomExx is said to have been active since 2018, at that time under the name Defray. The group gains access to networks through exploits, stolen logins, or Remote Desktop Protocol (RDP). There the criminals get more information and thus control the system. At the same time, the group stole sensitive data from unencrypted devices, which became the basis for extortion, the “Bleepingcomputer” wrote.
From the outside, cyberattacks often happen suddenly and quickly. But hackers often use social engineering campaigns to prepare for an attack over a very long period of time, as Proofpoint demonstrates with an example.
If you want to read more about cybercrime and cyber security, Register here for the weekly newsletter from Swisscybersecurity.net. The portal contains daily news on current threats and new defense strategies.