Interworks cloud: Cyberattack on cloud provider? [updated]

The systems of Interworks cloud, the CSP automation platform, based in Greece, appear to be experiencing serious malfunctions over the last 24 hours, according to exclusive information from SecNews. Are the malfunctions due to a cyberattack or an internal technical problem?

See also: Wiretapping Greece - Researchers reveal mass surveillance of telecommunications providers!

Since the early morning hours of August 29, dozens of customers of Interworκs cloud, provider of Office 365, Microsoft Azure, Microsoft ESD services, etc., have reported terrible malfunctions, delays , while others are unable to use the services they have purchased from the company at all. As they informed us in an attempt to contact the company, they receive general responses such as “disruption of services”, “we are working”.

The problems in the provider's systems and their lack of immediate restoration suggest that this is a cyberattack on the company, resulting in numerous complaints from its customers, who are concerned about the fate of their personal data.

According to information from SecNews, Interworks.cloud detected a breach in their systems, which is why they proceeded to partially deactivate services, possibly due to the investigation they are currently conducting.

See Also: Eavesdropping: Does the purchase of Predator spyware cost €8,000,000?

Among the reports, many customers report/suspect that the company has been subjected to a cyberattack and hackers have not only managed to gain access to its systems but appear to have remained inside them for several hours since Interworks cloud administrators have not been able to find a solution and get their platform back up and running.

Interworks cloud cyberattack? Is this a DDoS hacking attack?

Additionally, there are also malfunctions when accessing the company's main website. It is therefore possible that a successful DDoS hacking attack is underway on their systems, which managed to shut down the entire company and leave dozens of its customers out, both in Greece and abroad.

See Also: LockBit ransomware: Triple extortion tactic – DDoS attacks are also coming

Undoubtedly, based on recent developments in Greece regarding illegal data interceptions and surveillance of political figures by the government and Greek citizens, it is reasonable for Interworks cloud customers to fear that their personal data and all sensitive information shared with the company has been intercepted.

Secnews contacted Interworks cloud to provide answers and explanations regarding the malfunctions its customers are experiencing as well as what caused them, but so far we have not received any official response.

The questions are many - Why have all their systems been down for the last 24 hours? Has Interworks cloud been the victim of a cyberattack? If so, is it a DDoS cyberattack or some other form such as ransomware? Has there been a data leak and theft of customer personal information? Are actions being taken to resolve the problems as soon as possible? When will the systems be back up?

See also: Official response from DESFA to the cyberattack!

SecNews continues the investigation and will update you as soon as there is additional information regarding the incident.

What is Interworks cloud?

As stated on the official website of interworks.cloud, it is a distributor and cloud services provider with a network of over 400 cloud resellers and a strategic partnership with both Microsoft in the distribution of cloud services, as well as with a range of technology providers such as Microsoft, Acronis, Google, Webroot, Fortinet, Dropsuite. The interworks.cloud serves end customers in Greece, Cyprus and Malta. In addition, the company offers its own cloud services for businesses in Greece and abroad as well as a state-of-the-art cloud services management platform .

*Updated*

Interworks cloud cyberattack? The company's official response

Interworks cloud officially responds to SecNews and confirms that there was a security incident on August 29, 2022. See the company's statement which you can also find here.

“While investigation and restoration efforts continue, we can now confirm that our data center based in Thessaloniki fell victim to a large-scale cyberattack as of yesterday, Sunday 28/8/2022 at 01:09 AM.

Once the attack was detected (01:10 AM) by our security staff, containment efforts and countermeasures have been and are still being taken to protect customer data and work towards full restoration.

Right now, it appears that the vast majority of customer backup data will begin to be accessible again (but not online) in about 24 hours (current estimate at 11:45 AM).

Again, our priority at this time is to recover all customer data and restore access within this timeframe. Unfortunately, an estimate of the restoration time can only be given once we have secured and verified full access to customer data.”

The next scheduled update from the company is scheduled for 20.00

Next expected update: Mon 29/8/2022 at 20:00.

From the official response of the Interworks company, experienced technicians who collaborate with SecNews, estimate that this is a particularly extensive cyberattack that caused access restriction to corporate data including customer data, as occurs with extensive ransomware attacks. The fact that the recovery time is over 24 hours and there is no estimated time for full restoration of services at this time, indicates the extremely high power of the cyberattack.

SecNews remains at the disposal of Interworks.cloud regarding the publication of new information regarding the cyberattack, to inform the general public and its customers.