Network monitoring company LogicMonitor confirmed today that some users of its SaaS platform have fallen victim to cyberattacks.
See also: Key Group ransomware: Decryption tool restores files for free
The company says the hacker attack has affected what it describes as a "small number" of users and is working with those affected to mitigate the impact of the attacks.
"We are currently dealing with a security incident that has impacted a small number of our customers," a spokesperson told BleepingComputer.
"We are in direct communication and working closely with these customers to take appropriate measures to mitigate the impact.".
Although LogicMonitor did not confirm that its customers were affected by ransomware attacks, anonymous sources familiar with the incidents told BleepingComputer that malicious actors broke into customers' accounts and "managed to create local accounts and install ransomware."
The same sources reported that the ransomware was installed using the platform's on-premise LogicMonitor Collector sensors, which monitor user infrastructure but also have scripting capabilities.
This was allegedly done by hackers who deployed scripts from the cloud-based platform, which were pushed to on-premise Collectors and executed locally.
See also: Russian hackers target Ukrainian military with infamous Chisel malware
The company is investigating problems accessing customer accounts
Two days ago, the company said on its status page that it was investigating “technical anomalies” affecting customer accounts.
In a separate report on the incident, LogicMonitor states that the incident was resolved 17 hours ago.
See also: Sourcegraph website hacked
Customers were attacked by hackers due to weak default passwords
Another anonymous source told TechCrunch that the affected customers' accounts were compromised using default weak passwords assigned by LogicMonitor to new users.
These passwords were also automatically assigned to all other users created across all organizations until they were changed.
A LogicMonitor representative declined to provide additional information in response to BleepingComputer's inquiries.
According to LogicMonitor, its network monitoring is used by more than 25,000 users.
Information source: bleepingcomputer.com
