Software AG, one of the largest software companies, fell victim to a ransomware attack and is still experiencing some problems.
The attack took place on Saturday, October 3. It is said that a gang , named “Clop”, breached the company’s internal network, encrypted the systems and demanded more than $20 million for the decryption key.
Apparently, Software AG refused to pay the ransom to the ransomware gang, so the hackers published screenshots of data they had stolen from the company before encryption. The criminals leaked the data on their dark web.
The exposed data includes: employee passports and ID cards, emails , financial documents, and directories from the company's internal network.
Software AG disclosed the incident on Monday, October 5, when it said it was experiencing outages on its internal network “due to a malware attack.”
The company said that customer services, including cloud-based services, remained unaffected. It also said there was no evidence that customer information was affected. However, two days after that statement, Software AG issued a press release admitting that data had been stolen.
A copy of the ransomware binary used against Software AG was discovered by security MalwareHunterTeam. As mentioned above, the hackers demanded more than $20 million from the company, one of the largest ransom demands ever made in a ransomware attack.
According to ZDNet, the ID provided in this ransom note allows security researchers to view online conversations between the Clop gang and Software AG on a web portal run by the ransomware group. At this time, it appears that the company has not paid the ransom.
Software AG is Germany's second largest company and has more than 10,000 customers in 70 countries. The company has major customers such as Fujitsu, Telefonica, Vodafone, DHL and Airbus.
