I-Yanluowang Gang ransomware yaphule inethiwekhi ye-Cisco corporate

Iqela lemigulukudu yaseYanluowang laqhekeza inethiwekhi yeCisco ngasekupheleni kukaMeyi kwaye yeba ulwazi lwenkampani, yatsho inkampani kwingxelo.

Ngokophando olwenziwa yiCisco Security Incident Response (CSIRT) kunye neCisco Talos, i-hacker ithobe iziqinisekiso zomqeshwa weCisco emva kokubhaqa iakhawunti yobuqu kaGoogle apho iziqinisekiso ezigcinwe kwisiphequluli sexhoba zadityaniswa.

UCisco ubanga ukuba umhlaseli ujolise komnye wabaqeshwa bakhe kwaye wakwazi kuphela ukuba iifayili kwifolda yeBhokisi eqhagamshelwe kwi-akhawunti yaloo mqeshwa kunye neenkcukacha zoqinisekiso lomqeshwa kwi-Active Directory. Ngokutsho kwenkampani, idatha egcinwe kwifolda yeBhokisi yayingakhathali.

Abaduni baqweqwedisa iakhawunti kaGoogle yomqeshwa weCisco, equlethe iziqinisekiso ezingqinelanisiweyo zebrawuza, kwaye basebenzise ezo nkcukacha zokungena kwinethiwekhi yeCisco.

Emva kohlaselo oluntsonkothileyo lwelizwi lobuqhetseba olwenziwa liqela lemigulukudu yaseYanluowang, i-hacker yaqinisekisa umqeshwa weCisco ukuba amkele ukuqinisekiswa kwezinto ezininzi (MFA) izilumkiso zokutyhala.

Umbutho we-Ransomware waseYanluowang wabanga uxanduva lohlaselo kwaye ubanga ukuba ubiwe malunga neefayile ze-3.000 ezipheleleyo ze-2,8 Gb ngobukhulu. Ngokwamagama eefayile ezivezwe ngabahlaseli, basenokuba bebebile i-NDA, ikhowudi yomthombo, umxhasi weVPN kunye nezinye iinkcukacha.

Uhlaselo aluzange lusebenzise i-ransomware efihla iifayile. Emva kokususwa kwiinkqubo zeCisco, abahlaseli bathumela i-imeyile kubaphathi beCisco, kodwa yayingenayo izoyikiso ezicacileyo okanye iimfuno zentlawulelo.

​  

Ercole Palmeri: Innovation likhoboka