Boyne Resorts, a company that owns and operates mountain and lakeside resorts, ski resorts, and attractions in the US, was attacked by the WastedLocker ransomware, affecting its booking systems. According to BleepingComputer, the ransomware first breached the company’s offices and then moved laterally to target the systems of the resorts it operates. As a result of the attack, the company was forced to shut down parts of its network to prevent the ransomware from spreading further. The company’s customers were unable to make reservations at the resorts it manages.
Files on the company's systems were encrypted by the ransomware, and their names were changed by adding the ".easy2lock", which has been previously linked to WastedLocker ransomware infections.
In July, smartwatch and wearable device maker Garmin had to shut down some of its online services , as well as its call centers, after a WastedLocker ransomware attack. Additionally, in June, security experts at Symantec reported that at least 31 U.S. organizations have been targeted by the newly discovered WastedLocker ransomware
Furthermore, researchers from the NCC Group report and later Symantec confirmed that the malware was developed by the Russian hacking group “Evil Corp”, which is behind the Dridex trojan and several ransomware such as Locky, Bart, Jaff and BitPaymer. Most of the victims belong to the construction industry, followed by the IT, media and telecommunications sectors.
Με την ομάδα να αναπτύσσει δραστηριότητα στον κυβερνοχώρο τουλάχιστον από το 2007, το Υπουργείο Οικονομικών των ΗΠΑ επέβαλε τον Δεκέμβριο του 2019 κυρώσεις στην Evil Corp, για την πρόκληση βλαβών που ανέρχονται στα 100.000.000 $ τουλάχιστον.
The US Department of Justice (DoJ) has charged 32-year-old Russian Maksim V. and 38-year-old Russian Igor Turashev with distributing the infamous Dridex banking trojan and participating in international fraud and hacking schemes.
It's worth noting that US authorities do not allow ransom payments for WastedLocker, which means Boyne Resorts could face serious penalties if it pays the ransom.
