MSI just got hit by a massive ransomware attack, but even worse – it lost a ton of critical data to the hackers!
MSI Hit By Ransomware Attack + Data Theft!
On 7 April 2023, MSI (Micro-Star International) was hit by a ransomware attack, in which the hackers allegedly exfiltrated 1.5 terabytes of source codes, BIOS firmware, private keys and other data from its servers.
In its terse regulatory filing with the Taiwan Stock Exchange (TWSE), MSI admitted that it was hacked, but did not detail the circumstances or nature of the attack.
After detecting some information systems being attacked by hackers,MSI’s IT department has initiated information security defense mechanism and recovery procedures. The Company also has been reported the anomaly to the relevant government authorities.
MSI claimed that the attack had “[no] significant impact our business in terms of financial and operational currently“, but said that it was “enhancing the information security control measures of its network and infrastructure to ensure data security.”
In a public statement, MSI also urged users to only obtain firmware / BIOS updates from its official website, and refrain from using other sources.
Hackers Demand $4 Million From MSI To Not Release Stolen Data
The MSI ransomware attack and data theft appear to be committed by the Money Message ransomware gang.
While MSI has apparently restored files encrypted by Money Message’s ransomware, the gang now has access to about 1.5 terabytes of critical MSI data.
According to BleepingComputer, chats between Money Message and an MSI representative show the gang demanding a ransom payment of $4 million. Otherwise, Money Message will release the stolen files.
To show that they did indeed steal those MSI files, Money Message posted screenshots of what they describe was MSI’s Enterprise Resource Planning (ERP) databases and files containing software source code, private keys, and BIOS firmware.
Recommended : Can Approve New Participant block WhatsApp hackers?!
If Money Message releases MSI confidential data, it may not just be embarrassing for the Taiwanese company, it could allow other threat actors to use the source code and private keys to create malware targeting their customers.
In light of that, MSI users should only download and install software or BIOS firmware from the official MSI website.
Please Support My Work!
Name : Adrian Wong
Bank Transfer : CIMB 7064555917 (Swift Code : CIBBMYKL)
Credit Card / Paypal : https://paypal.me/techarp
Dr. Adrian Wong has been writing about tech and science since 1997, even publishing a book with Prentice Hall called Breaking Through The BIOS Barrier (ISBN 978-0131455368) while in medical school.
He continues to devote countless hours every day writing about tech, medicine and science, in his pursuit of facts in a post-truth world.
- Can Approve New Participant block WhatsApp hackers?!
- How To Block Facebook Ads + Pay Scammers!
- Pinduoduo App Contains Persistent Spy Malware!
- Was Bill Gates Destroyed In ABC News Interview?!
- Apple MFI plan to limit speed, power on USB-C leaked!
- Samsung Odyssey Ark Gaming Monitor : A Quick Look!
Support Tech ARP!