cognitive cybersecurity intelligence

News and Analysis

Search

Clop Ransomware is Now Blackmailing 66 Cleo Data-Theft Victims, Reports DataBreaches.Net

Right, let’s sit down for a chat about the state of play in cybersecurity. You know that old saying about ‘an Englishman’s home is his castle’? Well, it seems like our digital castles are under siege and we need to do more to guard our metaphorical moats.

I’ve pulled up a chair with a cup of Rosie Lee, because I want to tell you about the latest rumblings in the cybersecurity underworld. It’s that pesky Clop ransomware gang at it again, really causing a fair old stink. This time, they’re resorting to extortion with the victims of their attacks through Cleo’s data theft.

They’re playing a very nasty game, contacting victims directly and providing links to a secure chat channel (well, at least they claim it’s secure) to discuss the ransom payment. They’re even allowing victims to make the first move with email addresses to reach out to them. Imagine the audacity!

Here’s where it gets interesting. These cyber menaces have gathered quite a rogue’s gallery. They’ve listed the partial names of 66 companies who’ve so far declined a cosy ransom chat. Without a peep from these companies in the next 48 hours, their names will be out in the digital wild. Bleak, ain’t it?

You know, we can’t discuss the Clop gang without mentioning their past exploits. They’ve made a bit of a name for themselves by sniffing out weak spots in file transfer software. There’s been a fair few incidents, with over 100 victims in each case, affecting countless clients.

But what’s their game, you ask? They get a kick out of playing Lord and Master over these companies, threatening to leak fiercely guarded data unless a hefty ransom is coughed up. Many’s the time these threats aren’t just hot air.

The Clop’s deeds have left ripple effects far beyond the companies they target. A keen-eyed watcher named Nam3L3ss has been drawing attention to data leaked from Delta Dental back in May 2023, another poor victim of Clop’s mischief. With this data now making its rounds on a clear net forum, more and more people are being caught in the crossfire.

Did you hear about the scale of this Delta Dental debacle, by the way? They reported a breach that affected nearly 7 million people. And that’s just from one company!

This brings us to the elephant in the room. When will we wake up and smell the coffee about the dangers of commercial file transfer software transmitting unencrypted data? It’s as if we’re just waiting for a serious attack that could affect millions before making a change.

Remember that quote often attributed to Einstein about the definition of insanity? Doing the same thing repeatedly and expecting a different outcome. Is this what we’re doing? Accepting reckless risks with our digital safety? Perhaps we’re mad as a box of frogs for not banning it outright.

Well, that’s enough nattering from me. Here’s hoping this cuppa has given you a double shot of cybersecurity reality, making you mull over the need for change. Right then, time to fortify our digital castles. Bonds away, everyone!

by Parker Bytes

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts