Coca-Cola hack? Coca-Cola, the world's largest and perhaps most famous soft drink company, has been made aware of reports circulating that the company has been the victim of a cyberattack. Coca-Cola is now investigating these claims.
See also: CISA: 7 New Security Flaws Vulnerable to Attacks
The American company began its investigations after the Stormous gang announced that it had successfully hacked some of Coca-Cola's servers and stolen data (161 GB).
In fact, the attackers appear to be selling the stolen data on the victim data leak site they have created. Payment will be made in Bitcoin.
Threat actors claim that the stolen data includes, among others, documents in zip format, text files, emails and passwords, records , and other personal and important information.
See also: French hospitals targeted by hackers – Data stolen
Stormous Gang: Who is the group that claims to have infringed on Coca-Cola?
The criminals claim to be a ransomware. However, there is no indication at this time that they are deploying file-encrypting malware on victims' networks.
One could say that they are more like a group of extortionists threatening victims with data theft. This is the first time that Stormous has published a set of stolen data (from the alleged Coca-Cola hack). Last week, the gang launched a poll on Telegram and asked its followers to vote on who their next victim should be. The attackers had promised that the hack would involve a denial-of-service attack and the leaking of source code and data. Coca-Cola came out on top with 72%. The gang said that it only took them a few days to breach the major American company.
Coca-Cola and other victim choices in Stormous’s poll suggest that the attackers are targeting the West. After all, the group has been openly supporting Russia, even during its invasion of Ukraine. Previously, the gang had claimed that Epic Games, stealing 200 gigabytes of data and credentials from 33 million Epic store and game users. However, there has been no confirmation of the legitimacy of the data.
See also: Emotet malware “strikes again” after bug fix that prevented infection
Coca-Cola has also not confirmed that its data was stolen. The company told BleepingComputer that it is currently cooperating with law enforcement and that the investigation into the alleged Stormous attack has not yet revealed anything.
Source: Bleeping Computer
