news

Victim website:

indikaenergy.co.id

Victim country:

Indonesia

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

69,76 GB

Exfiltrated data type:

Corporate data (financial statements, employee data, partner network accesses and other private information of these companies) were stolen during the cyberattack. (The attack affected all units of INDIKA ENERGY GLOBAL: gsilab.id ptroid.com kideco.co.id alvaauto.com xapiens.id tripatra.com indikanature.co.id indyproperti.id emits.id indikafoundation.org indikaenergy.co.id code4strategic.co.id indikaresources.co.id rockgeoenergi.co.id interport.co.id IEG.ID karyabhumilestari.com petrosea.com mbss.co.id zebrax.id. They still have access to the corporate network of the INDIKA group of companies.)

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

inpro-electric.de

Victim country:

Germany

Attacker name:

Play Ransomware

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

360 GB

Exfiltrated data type:

Private and personal confidential data, a lot of technical documentation, IDs, passports, agreements.

Leaked data:

8 GB including 50 passports

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ilfsindia.com

Victim country:

India

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 299,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Contracts, personal data, passports, postal correspondence, financial documents.

Leaked data:

/

Ransom deadline:

09^th Mar 23

Cyber Risk Factor:

4

Victim website:

cotteeparker.com.au

Victim country:

Australia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 499,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Postal correspondence, contracts. Confidential and non-disclosure agreements. Personal data. All information on projects. Also, all information about all financial affairs of the company, including all financial documents.

Leaked data:

Sample with screenshots of miscellaneous documents

Ransom deadline:

09^th Mar 23

Cyber Risk Factor:

4

Victim website:

ispace.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

100 GB

Exfiltrated data type:

Miscellaneous, confidential and PII documents

Leaked data:

Sample with screenshots of miscellaneous, confidential and PII documents

Ransom deadline:

08^th Mar 23

Cyber Risk Factor:

4

Victim website:

ggelectronics.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

320 GB

Exfiltrated data type:

Marketing content, HR, business data, accounting data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

thinkwelty.com

Victim country:

USA

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,7 TB

Exfiltrated data type:

Personal and corporate data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

hak-graz.at

Victim country:

Austria

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

331 GB

Exfiltrated data type:

Miscellaneous documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

advance2000.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

80 GB

Exfiltrated data type:

SQL databases, client’s data: adresses, phone numbers, emails, birth dates, salary information, credit card numbers, etc.

Leaked data:

Sample with screenshots of miscellaneous documents

Ransom deadline:

100% of the exfiltrated data

Cyber Risk Factor:

4

Victim website:

anxa.com

Victim country:

France

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

60 GB

Exfiltrated data type:

Client’s data: full names, addresses, emails, birth dates, etc., finance, marketing, client’s personal training plans, client’s personal diet plans.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

thompson-safety.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

130 GB

Exfiltrated data type:

HR, business, employee data, finance.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

delawarelife.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2

Victim website:

shcm.es

Victim country:

Spain

Attacker name:

Royal Ransomware

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2