Tuesday, July 16, 2024
EHA

Hardware Giant MSI Hacked – Ransomware Group Issues Demand

A cyberattack was recently launched on some of the information systems of the multinational Taiwanese technology company Micro-Star International (MSI) Co., Ltd.

According to MSI’s statement, the incident was swiftly reported to law enforcement authorities, and recovery efforts have begun.

“Upon detecting network anomalies, the information department promptly activated relevant defense mechanisms and carried out recovery measures, and reported the incident to government law enforcement agencies and cybersecurity units,” MSI explains.

micro-star-msi-report.png

With annual sales of $6.5 billion, MSI is a major manufacturer of motherboards, graphics cards, desktops, laptops, servers, industrial systems, PC peripherals, and infotainment products.

Money Message Ransomware Gang Claims MSI Breach and Demands $4 Million Ransom

The company was added to the list of victims of the “Money Message ransomware” group this week. The group claims to have stolen the company’s CTMS and ERP databases and files holding source code, BIOS firmware, and private keys.

According to cybersecurity experts, the group only started operating this week. If MSI doesn’t comply with its demands for a ransom payment, Money Message now threatens to expose all of these supposedly stolen documents in around five days.

https://www.bleepstatic.com/images/news/u/1220909/2023/Ransomware/20/msi.jpg

Notably, the threat actors allegedly demanded a $4,000,000 ransom in discussions viewed by BleepingComputer at the time, claiming to have stolen 1.5TB of data from MSI’s systems, including source code and databases.

In a communication with an MSI agent, a Money Message operator claimed, “Say your manager, that we have MSI source code, including framework to develop bios; also we have private keys able to sign in any custom module of those BIOS and install it on PC with this bios.

Chat between the threat actor and the victim's representative

According to the company, there hasn’t been a significant impact on financial business as the damaged systems have progressively resumed normal operations.

“MSI urges users to obtain firmware/BIOS updates only from its official website, and not to use files from sources other than the official website”, the company said.

Struggling to Apply The Security Patch in Your System? – Try All-in-One Patch Manager Plus

Website

Latest articles

HardBit Ransomware Using Passphrase Protection To Evade Detection

In 2022, HardBit Ransomware emerged as version 4.0. Unlike typical ransomware groups, this ransomware...

New Poco RAT Weaponizing 7zip Files Using Google Drive

The hackers weaponize 7zip files to pass through security measures and deliver malware effectively.These...

New ShadowRoot Ransomware Attacking Business Via Weaponized PDF’s

X-Labs identified basic ransomware targeting Turkish businesses, delivered via PDF attachments in suspicious emails...

Hacktivist Groups Preparing for DDoS Attacks Targeting Paris Olympics

Cyble Research & Intelligence Labs (CRIL) researchers have identified a cyber threat targeting the...

Critical Cellopoint Secure Email Gateway Flaw Let Attackers Execute Arbitrary Code

A critical vulnerability has been discovered in the Cellopoint Secure Email Gateway, identified as...

Singapore Banks to Phase out OTPs for Bank Account Logins Within 3 Months

The Monetary Authority of Singapore (MAS) and The Association of Banks in Singapore (ABS)...

GuardZoo Android Malware Attacking military personnel via WhatsApp To Steal Sensitive Data

A Houthi-aligned group has been deploying Android surveillanceware called GuardZoo since October 2019 to...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles