+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: Security observations and vulnerabilities 2020-11-06 (/Thread-Security-observations-and-vulnerabilities-2020-11-06)
Security observations and vulnerabilities 2020-11-06 - Sikom - 11-07-2020
Security observations
Capcom hit by Ragnar Locker ransomware
---------------------------------------------------------------------------------
The Japanese game developer Capcom, has reported being hit by the Ragnar Locker ransomware on November 2nd. The attackers are claiming to have gained access to 1TB of sensitive data and are attempting to extort the company for 11 million dollars in bitcoins.
The group claims to have encrypted 2000 devices and the data stolen allegedly includes everything from financial data and documents, intellectual property, client and employee personal information, in addition to other company sensitive information. The group threatens to auction/publish this data if their demands are not met. Capcom is known for their franchises such as Street Fighter, Monster Hunter, Resident Evil and Mega Man.
https://www.bleepingcomputer.com/news/security/capcom-hit-by-ragnar-locker-ransomware-1tb-allegedly-stolen/
Vulnerabilities
None in particular.
Source - mnemonic AS newsletter
RE: Security observations and vulnerabilities 2020-11-06 - mothered - 11-07-2020
This Is a major breach.
It'll be Interesting to see whether the company complies with the attacker's request.
RE: Security observations and vulnerabilities 2020-11-06 - Sikom - 11-07-2020
(11-07-2020, 02:40 AM)mothered Wrote: This Is a major breach.
It'll be Interesting to see whether the company complies with the attacker's request.
I guess only time will tell. Hopefully not too much sensitive personal info though.
RE: Security observations and vulnerabilities 2020-11-06 - mothered - 11-07-2020
(11-07-2020, 02:59 AM)Sikom Wrote:Due to the nature of the data, I'd say they'll most likely pay the demand.(11-07-2020, 02:40 AM)mothered Wrote: This Is a major breach.
It'll be Interesting to see whether the company complies with the attacker's request.
I guess only time will tell. Hopefully not too much sensitive personal info though.
Here's a snippet from the article that's quite concerning.
Quote:Ragnar Locker claims to have encrypted 2,000 devices on Capcom's networks and are demanding $11,000,000 in bitcoins for a decryptor.
RE: Security observations and vulnerabilities 2020-11-06 - Sikom - 11-07-2020
(11-07-2020, 03:25 AM)mothered Wrote:(11-07-2020, 02:59 AM)Sikom Wrote:Due to the nature of the data, I'd say they'll most likely pay the demand.(11-07-2020, 02:40 AM)mothered Wrote: This Is a major breach.
It'll be Interesting to see whether the company complies with the attacker's request.
I guess only time will tell. Hopefully not too much sensitive personal info though.
Here's a snippet from the article that's quite concerning.
Quote:Ragnar Locker claims to have encrypted 2,000 devices on Capcom's networks and are demanding $11,000,000 in bitcoins for a decryptor.
To be honest, the amount of devices doesn't necessarily mean anything. The data on the devices is what's important in this circumstance.
What I do wonder is how this was not discovered, since it must be quite a bit of exfiltrating. Maybe SNIcat?
RE: Security observations and vulnerabilities 2020-11-06 - mothered - 11-07-2020
(11-07-2020, 03:35 AM)Sikom Wrote: To be honest, the amount of devices doesn't necessarily mean anything. The data on the devices is what's important in this circumstance.In this particular breach, I'm evaluating the nature of the data against the number of devices- both of which are significant, and certainly a cause for concern:
Quote:The attackers are claiming to have gained access to 1TB of sensitive data
(11-07-2020, 03:35 AM)Sikom Wrote: What I do wonder is how this was not discovered, since it must be quite a bit of exfiltrating. Maybe SNIcat?Perhaps an Inside job?
RE: Security observations and vulnerabilities 2020-11-06 - Sikom - 11-07-2020
(11-07-2020, 03:53 AM)mothered Wrote:Seems like Ragnar locker is pretty targeted towards each victim. I do however believe that it would be harder and risky to try to infiltrate the company to exfiltrate the data.(11-07-2020, 03:35 AM)Sikom Wrote: To be honest, the amount of devices doesn't necessarily mean anything. The data on the devices is what's important in this circumstance.In this particular breach, I'm evaluating the nature of the data against the number of devices- both of which are significant, and certainly a cause for concern:
Quote:The attackers are claiming to have gained access to 1TB of sensitive data
(11-07-2020, 03:35 AM)Sikom Wrote: What I do wonder is how this was not discovered, since it must be quite a bit of exfiltrating. Maybe SNIcat?Perhaps an Inside job?