The MediaMarkt blackmailers initially wanted $240 million to give the retailer access to their files again. That writes Bleepingcomputer.
It appears that the amount has now been reduced to $50 million. Ransomware gangs often start with unrealistic ransom demands to give their victims additional terror.
Hive ransomware is a relatively new operation that started in June 2021 and does not discriminate between its victims, although the FBI signaled last summer that mainly hospitals be a favorite. By the end of October, the group had already attacked more than 30 organizations.
Like many other ransomware gangs, they targeted vulnerabilities in Linux servers and virtual machines. This allows them to encrypt multiple servers at the same time with a single command. They also delete backups to prevent them from being restored.
The criminals usually proceed to publish files on HiveLeaks if payment is not made. It is possible that in addition to turnover figures, customer data will also be made public.
It is not clear who is behind Hive. We do work with affiliates, i.e. criminals who use the Hive software and then share the ransom.
Security guard ESET signaled last week that ransomware groups are becoming increasingly aggressive. For example, there are more frequent ransomware attacks with a double extortion, such as groups threatening to open DDoS attacks on companies, harass employees, or publish data if the ransom is not paid.
Although MediaMarkt is present in many European countries with stores, the Netherlands and Germany are said to have been particularly affected.
Source: Nieuws – Emerce by www.emerce.nl.
*The article has been translated based on the content of Nieuws – Emerce by www.emerce.nl. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!
*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.
*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!