this post was submitted on 18 Jun 2024
62 points (100.0% liked)
Data Breaches
1041 readers
61 users here now
Information about data breaches, data leaks, ransomware attacks, and other related stories.
Companion communities
- [email protected] - centered on the cybersecurity and information security profession.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I mean, there are also cases where the same company has been ransomed by multiple different TAs after paying ransoms, so it doesn't always go down the way you described either.
(also in the industry. not sure coming at this from the angle "I'm in the industry, your opinion is invalid" was the best choice.)
I actually dealt with that a couple of times. The last one had two TAs, Blacksuit and a second TA who gained access in tandem without coordination. They both executed their encryptions on the network and it spread. Some had the BH extension and some files had the other. Invariably, both sets of files were double encrypted, but it varied on which was the prominent extension.