AMD , the well-known California-based semiconductor company, says it is investigating a possible hack following claims by the RansomHouse gang that 450 GB of data was stolen from the company .
RansomHouse is a group that steals data (or has partners who do this work) and extorts victims. It was first identified in December 2021, when it leaked data for its first victim, the Saskatchewan Liquor and Gaming Authority (SLGA). The gang breaches corporate networks, steals data, and then demands ransom to keep that data from being leaked or sold to other threat actors. Since December, RansomHouse has added five more victims to its data-leakage website.
See also: Google and Apple are being asked to remove TikTok from their app stores
Last week, the RansomHouse gang reported on Telegram that it would sell data for a well-known company, whose name has three letters, starting with A. Yesterday, the extortion group added AMD to the data it has created. There, the attackers claimed to have stolen a large amount of data (450 GB) from the company.
AMD hack?
According to BleepingComputer, RansomHouse said its “collaborators” breached AMD’s network about a year ago. Although the site says the data was stolen on January 5, 2022, the threat actors said that was the date the hackers lost access to AMD’s network.
The gang has previously been linked to ransomware operations such as WhiteRabbit, but the group claims it does not encrypt devices and that no ransomware in the AMD attack. Additionally, the extortionists said they did not contact AMD to demand ransom, as selling the data to other entities or threat actors was more valuable.
“No, we have not contacted AMD as our partners consider it a waste of time: it would be more worthwhile to sell the data rather than wait for AMD representatives to react,” a RansomHouse spokesperson told BleepingComputer.
See also: T-Mobile: Sells data to advertisers, but not iPhone users
RansomHouse claims that the stolen AMD data includes research and financial information.
It's worth noting that the group has not provided any evidence of the hack and the stolen data other than a few files containing information allegedly collected from AMD's Windows domain. This data includes a CSV containing a list of over 70,000 devices that appear to belong to AMD's internal network , as well as an alleged list of credentials AMD for users with weak passwords, such as "password", "P@ssw0rd", 'amd!23' and 'Welcome1.'
AMD said it has been made aware of RansomHouse's claims of network breach and data theft and is investigating the incident to determine whether a cyberattack actually took place.
See also: Raccoon Stealer returns with a new version that steals your passwords
“AMD is aware that a threat actor claims to be in possession of stolen data from AMD. An investigation is currently underway.” – AMD.
Source: www.bleepingcomputer.com
