Taiwanese hardware manufacturer Gigabyte has been attacked by a ransomware operator, who has reportedly encrypted and exfiltrated over 100 GB of sensitive data .
Gigabyte has acknowledged reports of the cyberattack, claiming that it’d affected a small number of servers, according to the Chinese news site United Daily News.
While Gigabyte has not officially revealed details about the malicious campaign, BleepingComputer has learnt that the company was attacked by the RansomEXX gang.
- These are the best ransomware protection tools
- Here's our choice of the best malware removal software on the market
- We've put together a list of the best endpoint protection software
According to reports, the attack occurred in the middle of last week and forced the company to shut down systems in Taiwan, as well as its support site and portions of the Taiwanese website.
Classic double-extortion
Reportedly, whenever RansomEXX operators encrypt files on a target, they drop a link to a non-public page on the encrypted device.
A source shared the link to the non-public page with BleepingComputer, which reveals that the ransomware gang is in possession of 112GB of Gigabyte data, including many documents under non-disclosure agreements (NDA).
The gang also shared screenshots of four such sensitive documents, threatening to put them out in the open if the ransom isn’t paid.
The documents reportedly include an American Megatrends debug document, an Intel "Potential Issues" document, an "Ice Lake D SKU stack update schedule," and an AMD revision guide.
- Protect your devices with these best antivirus software
Via BleepingComputer
