Another computer giant company Acer becomes the victim of a ransomware attack named Revil. The attackers demanded the ransom of $50,000,000 while decrypting the files.Acer is a Taiwanese-based electronics and computer maker organization, well known for developing desktops and monitors. The organization is working with 7,000 employees and earned about $7.8 billion in 2019.
Yesterday, the attackers leaked the data they got by penetrating the breached and they also shared some images as proof while demanding the ransom.The sample of leaked data includes the documents, financial spreadsheets, bank communications, and other confidential stuff that may be caused serious damage to the organization.
However, the company didn’t state any clear answer regarding this attack and they didn’t disclose any information that they suffered from the Revil ransomware attack. While managing this attack and revoking its effect the company states that;
“We are continuosly upgrading our cybersecurity infrastructure while protecting our business continuity and the information. We also request all the organizations and companies to make the security disciplines and execute best practices and check for unauthorized access or abnormalities inside the system.”
“Acer is continuously enhanching their IT systems and almost every attack is defended well. Multiple companies like us are experincing serveral attacks, and we are also seen multiple abnormal situations, therefore we follow our relevant laws while protecting and enhanching the data protection in all the devices working across the world.”
The spokesperson from Acer said that the investigation is going on and for security reasons, we are unable to comment anything about this attack.
What are Attackers Demanding?
According to the experts, the attackers demand a $50 million ransom from the organization. They also leaked the sample documents and according to the researchers, this note is related to the Acer attack.
The conversation between the victims and the attackers is started on March 14th and the spokesperson of Acer is shocked about the massive loss of $50 million. After that, the attackers also shared a link that connects the Acer data leak page.
Whereas, the attackers also offered 20% discounts if the organization is ready to make the payment by this Wednesday. Once the payment is done, the attackers will provide a decryptor tool, a vulnerabilities report, and a list of stolen files.
The attackers Revil also offers a warning to Acer which links it to the SolarWinds Attacks and the Revil demand in one of the largest ransomware demands in the world, apart from that they also take $30 million from the Dairy Farm Attack.
How this is Connected with Microsoft?
According to the investigation of experts, the attackers targeted the Microsoft Exchange server on Acer’s domain and Advanced Intel’s Andariel Cyberintelligence system also identified it.
Whereas the attackers behind the DearCry ransomware also used the ProxyLogon vulnerabilities while deploying the ransomware but they use it from the smaller operations with limited victims.
If the ransomware organization Revil did not exploit the vulnerabilities present in Microsoft Exchange then this is the first time that the hackers will trap the big game and conduct this ransomware operation successfully.
