- Cloud hosting provider Dataresolution.net was hit by Ryuk ransomware attack on Christmas Eve.
- The attack briefly locked out the company of its own systems.
- The attack was reported by security researcher Brian Krebs on KrebsOnSecurity.
- No data was stolen in the attack
Cloud hosting provider Dataresolution.net was hit by ransomware attack on Christmas Eve and briefly locked out of its own systems.
The attack was first reported by security researcher Brian Krebs on KrebsOnSecurity and said that the company was hit by Ryuk ransomware attack, the same which disrupted delivery and publishing of major newspapers across the US last week.
Data Resolution LLC is a California based cloud hosting provider and serves more than 30,000 businesses entities worldwide.
According to the company, on christmas Eve the attackers gained access to company’s system through a compromised login account and started infecting servers.
The access gave the attacker control over Data Resolution’s data center domain and also locked out of its own systems
The company said that soon after the detecting the attack it shut down it networks to prevent further spreading of infection and started the process of cleaning and restroing infected systems.
The company also confirmed that no data was stolen in the attack and attackers intend was to force the company to pay ransom to recover the encrypted data.
According to the latest status update, the company is still working on restoring email access and databases for clients
“A source at a company that uses Data Resolution to manage payroll payments told KrebsOnSecurity that the cloud hosting provider said it did not attempt to pay the requested ransom, preferring to restore systems from backups instead.” said in the post published by Brian Krebs on KrebsOnSecurity.
Ryuk ransomware was discovered by checkpoint researchers in August 2018 targeting various organization worldwide.
You may be interested in reading:New Variants of Shamoon Disk-Wiping Malware Uploaded to VirusTotal