https://siliconangle.com/2020/08/02/travel-management-company-cwt-hands-4-5m-following-ransomware-attack/
By Duncan Riley
SiliconAngle.com
08/02/2020
Business travel management company CWT Global B.V. is the latest company
to pay a ransom demand following a ransomware attack.
According to report Friday by Reuters, the company paid $4.5 million to
those behind the ransomware after the attack knocked some 30,000 of the
company’s computers offline.
The hackers are also alleged to have stolen reams of sensitive corporate
files, although the company denies it. CWT is one of the largest travel
companies in the U.S. and ranks fifth on a list of the top-earning travel
companies in the world. Its clients include a third of the companies on
the S&P 500 U.S. stock index.
The ransomware attack is said to have involved Ragnar Locker. Tat form of
ransomware attacks Microsoft Windows and usually targets software used by
managed service providers to prevent the attack from being detected and
stopped. Once successfully deployed on a targeted computer or network,
Ragnar Locker at first performs reconnaissance and pre-deployment tasks,
including stealing a victim’s files, before encrypting files and demanding
a ransom.
[...]
--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
Follow InfoSec News on Twitter
https://twitter.com/infosecnews_
Follow InfoSec News on LinkedIn
https://www.linkedin.com/company/infosecnews/