The Russian National Coordination Center for Computer Incidents (NKTsKI) is warning the country's credit and financial sector about a breach by LANIT, a major Russian IT and software services provider.
The cyberattack took place on February 21 and has likely affected LLC LANTER and LLC LAN ATMservice, which are part of the LANIT Group of Companies.
LANIT is a very important company in its industry with its clientele including entities such as the Russian Ministry of Defense and important players in the military-industrial sector.
See also: Australia: Genea suffered a security breach
LLC LANTER and LLC LAN ATMservice are Russian companies specializing in banking technology and related services, providing software for banking equipment, payment systems and ATMs.
Following the breach of the IT provider, NKTsKI security experts recommend that all organizations in the financial sector rotate passwords and access keys and change remote access credentials. This applies to all organizations that may be affected, i.e., organizations whose systems are hosted in LANIT data centers.
“If your infrastructure uses LANIT group products and LANIT engineers have received remote access, it is also recommended to change the login credentials“.
“In addition, it is recommended to strengthen the monitoring of threats and security events in systems developed or maintained by LANIT Group engineers,” the experts warn.
See also: Ghost ransomware has breached organizations in 70 countries
Additional recommendations are included in a PDF file.
At this time, NKTsKI has not clarified how the attackers gained access to LANIT's network. We also do not know the identity of the attackers or whether any data was stolen during the attack.
The breach of Russian IT provider LANIT serves as a reminder that no organization is immune to cyber threats , and all businesses must prioritize cybersecurity as a critical aspect of their operations. This includes regularly updating software and systems, implementing strong access controls, and conducting frequent security assessments.
See also: Finastra notifies those affected by recent breach
Financial sector organizations involved in LANIT should be very vigilant in the coming period and monitor suspicious behavior systems . They should also prioritize investments in advanced security solutions and technologies to protect sensitive data and prevent cyberattacks. This includes implementing robust firewalls and intrusion detection systems.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Source: www.bleepingcomputer.com
