MSI confirms security hole and ransomware attack
Taiwanese computer hardware company MSI suffered a ransomware attack last week. They They are ensuring that it is not a major attack, and a group of cybercriminals are asking for four million dollars for the unlock keys.
The PCMag portal discovered a recent report that MSI submitted to the Taiwan Stock Exchange. In it, MSI detailed the incident, and included a discussion about what data could potentially have been taken in the attack, and the effects it could have on the business.
MSI has declared before the Taiwanese stock exchange that they have suffered a ransomware attack
After detecting that some information systems were being attacked by hackers, MSI IT department has put in place an information security defense mechanism and recovery procedures. The Company has also reported the anomaly to the relevant government authorities.
MSI
Other than that, details of the attack are scant. They have not stated or given details of when the incident occurred, what systems and endpoints the company had encrypted. Nor have they said if any sensitive data was stolen in the attack. But we can intuit that, if they did not say so, it would not be a severe attack.
MSI has said that the cyber attack did not have any “significant” operational or financial impact. They noted that there is currently no significant impact on their business in financial and operational terms. In addition, they have already strengthened the information security control measures of their network and infrastructure to ensure the security of the data they handle. They have warned their users obtain BIOS and firmware updates from official sources. If they want to download them, they should use the official MSI website, since malware posing as official software is widespread, sometimes paying Google Ads to appear first in the most common searches.
Earlier this week, the Money Message ransomware gangclaimed to have infiltrated some of MSI's systems and stolen files. They say they will be leaked online next week if the company refuses to pay a $4 million ransom.
Source: TechRadar