Ukraine Fears Second Ransomware Outbreak as Another Accounting Firm Got Hacked

itman · Aug 23, 2017

NotPetya II?

Ukraine Fears Second Ransomware Outbreak as Another Accounting Firm Got Hacked

Ukrainian authorities and businesses are on alert after a local security firm reported that another accounting software maker got hacked and its servers were being used to spread malware.

The incident is almost identical to how the NotPetya ransomware outbreak started on June 27, this year, when hackers breached Intellect Services' servers and trojanized update packages for the M.E.Doc accounting software package, delivering at least three ransomware families on three different occasions (XData, NotPetya, and a WannaCry lookalike).

Hackers breached M.E.Doc's rival

This time around, according to two reports by ISSP Labs, hackers breached the servers of Crystal Finance Millennium (CFM), another company that makes accounting software for local businesses, one of Intellect Services' rivals.

Hackers didn't breach the CFM update systems, but only the company's web server, which they used to store malware.

According to Costin Raiu, director of Global Research and Analysis Team at Kaspersky Lab, attackers breached the company's servers since at least August 18, last week.
Click to expand...

https://www.bleepingcomputer.com/ne...tbreak-as-another-accounting-firm-got-hacked/

itman · Aug 23, 2017

Detailed analysis here: https://issp.ua/issp_system_images/Crystal_Finance_Millennium_CyberAttack_EN.pdf and here https://issp.ua/issp_system_images/UPD_samples_analysis_eng.pdf

Log in or Sign up

Ukraine Fears Second Ransomware Outbreak as Another Accounting Firm Got Hacked

itman Registered Member

itman Registered Member

Log in or Sign up

Ukraine Fears Second Ransomware Outbreak as Another Accounting Firm Got Hacked

itman Registered Member

itman Registered Member

Useful Searches